About the role
Conduct authorized penetration testing and vulnerability assessments on web applications, networks, and systems.
Identify, analyze, and document security vulnerabilities and potential risks.
Perform basic security testing using industry-standard tools.
Assist in web application, network, and API security assessments.
Use tools such as Burp Suite, Nmap, Wireshark, and Metasploit under approved testing scopes.
Perform vulnerability scanning and basic manual security testing.
Understand and apply OWASP Top 10 security guidelines.
Prepare detailed reports describing vulnerabilities, their impact, and remediation recommendations.
Collaborate with senior penetration testers and security teams to validate findings.
Support retesting activities to verify that identified vulnerabilities have been resolved.
Stay updated on cybersecurity threats, attack techniques, and security best practices.
Follow ethical hacking guidelines and obtain proper authorization before performing security tests.
Requirements
Basic knowledge of penetration testing and ethical hacking.
Understanding of networking concepts, including TCP/IP, DNS, HTTP/HTTPS, and ports.
Familiarity with Linux and Windows operating systems.
Basic knowledge of web application security and common vulnerabilities.
Familiarity with tools such as Burp Suite, Nmap, Wireshark, and Metasploit.
Basic scripting knowledge in Python, Bash, or PowerShell is an advantage.
Understanding of OWASP Top 10 and vulnerability assessment methodologies.
Strong analytical, problem-solving, and documentation skills.
Willingness to learn new cybersecurity tools and techniques.