About this role

Conduct penetration testing on web applications, APIs, cloud environments, networks
Red teaming for Agentic AI
Perform manual and automated security testing aligned with OWASP, NIST, and ISO 27001 standards
Execute SAST and DAST scans and support CI/CD security integration
Analyze findings using tools such as Burp Suite, OWASP ZAP, Nessus, Qualys, Nmap, and Metasploit
Provide remediation guidance and prepare concise security assessment reports

6+ years of hands-on experience in penetration testing or security testing
Strong knowledge of application, cloud, and network security
Experience with SAST tools such as SonarQube, Fortify, Checkmarx, Veracode, and Snyk
Experience with DAST tools such as Burp Suite, OWASP ZAP, AppScan, and Acunetix
Familiarity with OWASP Top 10, MITRE ATT&CK, and PTES
Basic scripting knowledge in Python, Bash, PowerShell, or JavaScript
Certifications (Nice to Have) OSCP CEH GWAPT CISSP CISM AWS Certified Security – Specialty

Penetration Tester – Security Tester

Key skills