Penetration Tester

We are seeking a talented and experienced Penetration Tester to join our dynamic team at Worldsec Technologies. The ideal candidate will have 2-3 years of experience in conducting penetration tests, identifying security vulnerabilities, and providing actionable recommendations to mitigate risks. If you are passionate about cybersecurity and enjoy uncovering weaknesses in systems and applications, we want to hear from you.

• Conduct comprehensive penetration tests on networks, systems, and applications to identify security vulnerabilities and weaknesses.
• Perform manual and automated security assessments, including network scanning, web application testing, and social engineering.
• Exploit vulnerabilities to assess their impact and simulate real-world cyber attacks, such as privilege escalation, data exfiltration, and lateral movement.
• Document findings, including detailed descriptions of vulnerabilities, potential impact, and recommendations for remediation.
• Collaborate with clients to understand their security requirements and provide tailored recommendations to enhance their security posture.
• Communicate findings and recommendations to technical and non-technical stakeholders, including management and IT teams.
• Stay current with emerging threats, vulnerabilities, and security technologies to continuously improve penetration testing methodologies and techniques.

• Bachelor's degree in Computer Science, Information Security, or related field.
• 2-3 years of experience in penetration testing, vulnerability assessment, or related roles.
• Strong understanding of common security vulnerabilities and attack vectors, such as OWASP Top 10, CWE/SANS Top 25, and MITRE ATT&CK Framework.
• Experience with penetration testing tools and frameworks, such as Metasploit, Burp Suite, Nmap, and Kali Linux.
• Knowledge of network protocols, operating systems, and web application architectures.
• Relevant certifications such as Certified Ethical Hacker (CEH), Offensive Security Certified Professional (OSCP), or GIAC Penetration Tester (GPEN) are a plus.
• Excellent communication and interpersonal skills, with the ability to effectively convey technical information to both technical and non-technical audiences.
• Strong analytical and problem-solving skills, with the ability to think creatively and strategically to identify and exploit security weaknesses.