Senior Cyber Security Research Engineer – Pen Test

Responsibilities

• Conduct application penetration testing across browser-based/web applications, APIs, and mobile applications
• Configure and tune automated tools to support testing
• Perform deep defect analysis by reproducing, validating, and safely demonstrating impact
• Produce clear, reproducible technical reports with evidence
• Collaborate with application and security teams to ensure shared understanding of defects
• Support continuous improvement of testing methodologies and processes

• 4+ years of Cyber Security Research experience
• 2+ years of hands‑on application penetration testing experience (manual testing required)
• 2+ years of Dynamic Application Security Testing (DAST) experience
• Advanced experience with testing tools such as Burp Suite, Invicti, Web Inspect, and Fiddler
• Advanced knowledge of application security and common vulnerabilities (OWASP Top 10)
• Experience with scripting and automation (e.g., Python, Shell)
• Knowledge of security best practices and compliance standards (e.g., PCI DSS, GDPR)
• Security certifications such as OSCP, BSCP, GWAPT, GPEN, GXPN or equivalent are a plus