Penetration Tester

This is a fully remote position, open to applicants in Florida.

📋 Description

• Execute penetration tests on web applications, mobile applications, and APIs to uncover vulnerabilities and potential exploits.

• Conduct both internal and external network penetration testing.

• Utilize social engineering methods, including phishing campaigns, to mimic real-world attacks and highlight human-related security threats.

• Create comprehensive technical reports and deliver actionable recommendations.

• Work in collaboration with internal teams and external clients to discuss findings, mitigation strategies, and best practices for security.

• Ensure adherence to GDPR, PCI-DSS, SOC 2, and other pertinent security standards and regulations.

• Remain updated on emerging threats, vulnerabilities, and best practices in security.

⛳️ Requirements

• Demonstrated experience (3+ years) in penetration testing across web applications, mobile applications, APIs, and network environments.

• Proficiency in both internal and external network penetration testing.

• Understanding of prevalent security vulnerabilities and attack vectors, including the OWASP Top 10 and MITRE ATT&CK frameworks.

• Familiarity with industry-standard tools like Burp Suite, Nmap, Metasploit, Wireshark, Nessus, and others.

• Experience in cloud environments such as AWS, Azure, and Google Cloud is advantageous.

• Strong grasp of GDPR, PCI-DSS, SOC 2, and other regulatory frameworks.

• Exceptional verbal and written communication skills, capable of conveying findings to both technical and non-technical audiences.

• OSCP, CEH, GPEN, or equivalent certifications are favored.

• Experience with mobile security frameworks and tools, including OWASP MSTG.

• Background in API security testing, including OAuth and other common API security models.

• Proficient in one or more programming/scripting languages such as Python, Bash, or JavaScript.

🏝️ Benefits

• Flexible, remote contract opportunity.

• Flexibility of remote work with a nearshore emphasis.

• Competitive compensation.