Penetration Tester | Vulnerability Analyst

We’re Hiring:
Penetration Tester | Vulnerability Analyst

Employment Type: Full-Time

Level: Mid-Level to Senior

We are seeking a skilled and security-focused Penetration Tester | Vulnerability Analyst to identify, assess, and help remediate security weaknesses across applications, networks, systems, and digital infrastructure. The ideal candidate will combine hands-on security testing, vulnerability assessment, risk analysis, and technical reporting to strengthen the organization’s overall security posture.

• Conduct authorized penetration testing across web applications, APIs, networks, servers, cloud environments, and other approved systems.
• Perform vulnerability assessments to identify security weaknesses, misconfigurations, outdated components, and exposure risks.
• Define testing scope, objectives, methodologies, rules of engagement, and assessment requirements.
• Conduct reconnaissance and asset discovery within approved testing environments.
• Assess applications and infrastructure for common security vulnerabilities and configuration weaknesses.
• Perform manual and automated security testing using appropriate industry-standard tools.
• Validate identified vulnerabilities and distinguish genuine security risks from false positives.
• Assess vulnerability severity based on technical impact, exploitability, business exposure, and risk.
• Analyze attack paths and identify potential ways multiple weaknesses could affect an environment.
• Test authentication, authorization, session management, input validation, access controls, and other security mechanisms.
• Assess APIs, web services, mobile applications, and cloud-based services where applicable.
• Conduct network and infrastructure security assessments across approved internal and external environments.
• Review system configurations, security controls, network architectures, and technical documentation.
• Perform vulnerability scanning and prioritize findings according to organizational risk-management requirements.
• Research newly disclosed vulnerabilities, security advisories, exploits, and emerging attack techniques.
• Monitor vulnerability trends and assess whether newly discovered issues affect organizational assets.
• Work with system administrators, developers, Dev Ops teams, and security engineers to investigate security findings.
• Provide clear technical remediation recommendations for identified vulnerabilities.
• Conduct validation or retesting activities after remediation to confirm that vulnerabilities have been appropriately addressed.
• Prepare detailed penetration-testing and vulnerability-assessment reports for technical and management audiences.
• Document evidence, affected assets, security impact, risk ratings, and recommended remediation actions.
• Present assessment findings to stakeholders and explain technical risks in business-relevant terms.
• Maintain accurate records of vulnerabilities, remediation status, testing activities, and security findings.
• Support vulnerability-management programs and contribute to security improvement initiatives.
• Help improve security testing methodologies, assessment procedures, automation, and reporting processes.
• Maintain strict confidentiality and ensure all security testing activities remain within authorized scope and approved procedures.

• Bachelor’s degree in Cybersecurity, Information Security, Computer Science, Information Technology, or a related field.
• Previous experience in penetration testing, vulnerability assessment, security testing, or cybersecurity analysis.
• Strong understanding of network security, operating systems, web applications, APIs, databases, and cloud environments.
• Familiarity with common web and application security risks, including OWASP security principles.
• Experience using…