Ethical Hacker

Job Title:

Ethical Hacker / Penetration Tester

Experience:

2 5 Years Job Type: Full-Time Location

We are seeking a skilled Ethical Hacker to identify security vulnerabilities, assess risks, and strengthen the security of our organization's systems, networks, and applications. The ideal candidate will have hands‑on experience with penetration testing, vulnerability assessment, and security testing methodologies.

• Conduct authorized penetration testing on web applications, networks, servers, and systems.
• Identify, analyze, and document security vulnerabilities and potential threats.
• Perform vulnerability assessments and recommend appropriate remediation measures.
• Conduct web application, API, network, and infrastructure security testing.
• Evaluate security configurations, authentication mechanisms, and access controls.
• Use industry‑standard security tools to detect and validate vulnerabilities.
• Prepare detailed technical reports with findings, risk ratings, and remediation recommendations.
• Collaborate with IT, development, and security teams to resolve identified vulnerabilities.
• Perform retesting to verify that security issues have been properly addressed.
• Stay updated on emerging cyber threats, attack techniques, and security best practices.
• Ensure all testing activities are conducted with proper authorization and within the approved scope.

• Strong understanding of networking protocols, TCP/IP, DNS, HTTP/HTTPS, and network security.
• Hands‑on experience with penetration testing and vulnerability assessment.
• Knowledge of web application security risks, including the OWASP Top 10.
• Familiarity with tools such as Burp Suite, Nmap, Metasploit, Wireshark, and Nessus.
• Understanding of operating systems, including Linux and Windows.
• Knowledge of scripting languages such as Python, Bash, or Power Shell.
• Understanding of authentication, authorization, encryption, and security protocols.
• Experience preparing vulnerability assessment and penetration testing (VAPT) reports.
• Strong analytical, problem‑solving, and documentation skills.

• Certifications such as CEH, OSCP, CompTIA Security+, or equivalent.
• Knowledge of cloud security across AWS, Microsoft Azure, or Google Cloud.
• Experience with API security testing, mobile application security, or Active Directory assessments.
• Familiarity with security frameworks such as NIST, ISO 27001, and MITRE ATT&CK.
• Understanding of secure software development practices and Dev Sec Ops .

Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field, or equivalent practical experience.

A detail‑oriented security professional with strong technical expertise, a proactive approach to identifying vulnerabilities, and the ability to communicate security risks and remediation strategies effectively.

Note:

All penetration testing and security assessments must be performed with explicit authorization and within the agreed scope.