Penetration Tester

OVA.WorkNew York, United States
ContractOn-siteJuniorLimited info disclosed
44 views0 applications

Description

Job Description: Penetration Tester Position Title Penetration Tester / Ethical Hacker Job Summary We are seeking a skilled Penetration Tester to assess the security posture of our applications, networks, infrastructure, and cloud environments. The ideal candidate will perform authorized security assessments, identify vulnerabilities, simulate real-world attack scenarios, and provide detailed remediation recommendations to strengthen organizational security. Key Responsibilities Conduct penetration testing across web applications, mobile applications, APIs, networks, wireless environments, and cloud platforms. Perform vulnerability assessments and security reviews to identify weaknesses and potential attack paths. Execute black-box, white-box, and grey-box penetration tests based on project requirements. Perform reconnaissance, threat modeling, exploitation, and post-exploitation analysis within approved scopes. Analyze vulnerabilities and provide risk ratings based on business impact. Use manual testing techniques along with industry-standard security tools. Prepare detailed technical reports including findings, evidence, impact analysis, and remediation guidance. Present security findings to technical teams and stakeholders. Validate remediation efforts through retesting. Stay updated with emerging vulnerabilities, exploits, attack techniques, and security trends. Required Technical Skills Strong understanding of networking concepts (TCP/IP, DNS, HTTP/HTTPS, VPNs, firewalls). Hands-on experience with web application security testing (OWASP Top 10). Knowledge of operating systems including Linux and Windows. Experience with penetration testing tools such as: Burp Suite Nmap Metasploit Wireshark Nessus/OpenVAS SQLMap Kali Linux tools Knowledge of scripting/programming languages such as Python, Bash, PowerShell, or JavaScript. Understanding of vulnerability assessment, exploitation techniques, and security controls. Familiarity with cloud security concepts (AWS/Azure/GCP) is preferred. Certifications (Preferred) OSCP (Offensive Security Certified Professional) CEH (Certified Ethical Hacker) eJPT / PNPT CREST certifications Security+ or equivalent security certifications Education & Experience Bachelor's degree in Computer Science, Information Security, Cybersecurity, or related field preferred. Experience in penetration testing, vulnerability assessment, or security consulting. Strong analytical and problem-solving abilities. Ability to document findings clearly and communicate technical risks effectively. Soft Skills Strong written and verbal communication skills. Ability to work independently and with security teams. Attention to detail and ethical mindset. Ability to explain technical vulnerabilities to both technical and non-technical audiences. Deliverables Penetration testing reports. Vulnerability assessment reports. Security improvement recommendations. Proof-of-concept demonstrations where applicable. Role Type Full-time / Contract Department Cybersecurity / Information Security / Offensive Security