إرفاق
وصف الوظيفة
- Analyze and study technical architecture, configurations, and documentation to fully understand system environments prior to performing security assessments.
- Identify, exploit, and document vulnerabilities using industry-standard and custom tools.
- Conduct advanced penetration tests on web applications, mobile apps, networks, cloud environments, APIs, IoT devices, and infrastructure.
- Validate remediation efforts and provide re-testing to ensure vulnerabilities are fully resolved.
- Perform social engineering assessments, phishing simulations, and physical security tests when required.
- Stay current with emerging threats, vulnerabilities, exploit techniques, and offensive security tools.
- Mentor junior penetration testers and support internal knowledge-sharing initiatives.
- Contribute to research projects, whitepapers, or industry events when applicable.
- Participate in client kickoff meetings, scoping sessions, and technical discussions, applications walkthroughs, and technical discussions.
- Prepare detailed penetration testing reports, including technical findings, risk ratings, evidence, and tailored recommendations.
- Present results to technical teams and senior leadership, offering clear and actionable improvement strategies.
Personal Skills
- Strong analytical and problem-solving skills to assess complex systems and identify security weaknesses.
- Excellent communication abilities to clearly present technical findings to both technical and non-technical clients.
- High attention to detail in testing, documentation, and reporting.
- Effective time and project management to handle multiple assessments and meet deadlines.
- Professional client engagement and teamwork with the ability to collaborate effectively and maintain confidentiality.
Technical Skills
· Must have experience in pen testing and/or red teaming engagements, not just bug bounty and CTF.
· Advanced knowledge of penetration testing methodologies
- In-depth understanding of network protocols and systems
- Proficiency in using penetration testing tools such as Metasploit, Nmap, and Burp Suite.
· Strong knowledge of security frameworks and standards (e.g., OWASP, NIST).
· Experience in conducting application security assessments and vulnerability assessments.
· Ability to analyze and report on security findings in a clear and concise manner.
· Expertise in social engineering techniques and physical security assessments.
· Relevant certifications such as CEH, OSCP, or CISSP would be a plus
-At least 3 years combined experience in Mobile Application penetration testing and the at least 2 of the following:
Web application penetration testing
Network/infrastructure penetration testing
OT/ICS penetration testing.
· Source code review for control flow and security flaws
Previous experience in at least 2 of the following
Shell scripting or automation of simple tasks.
Developing, extending, or modifying exploits, shellcode or exploit tools.
Application development (web/mobile)
Malware reverse engineering.
Vulnerability assessment / Security assessment tools
Cloud / Systems administration.
المؤهلات العلمية
Bachelor’s degree in Cybersecurity, Computer Science or Information Security
تفاصيل الوظيفة
المرشح المفضل
