2+ years of hands-on penetration testing experience (mid to senior; 2–6+ years preferred)
Strong knowledge of OWASP Top 10, ASVS, and API Security Top 10; experience in web, API, and at least one of mobile, infrastructure, or cloud testing
Proficiency with manual testing techniques and key tools (Burp Suite, Nmap, Kali Linux) and scripting (Python or PowerShell)
Excellent written and verbal communication in English, strong analytical skills, and ability to document clearly and work independently or in a team
Requirements:
Perform manual-first penetration testing across web, API, and mobile (iOS/Android) applications, identifying and exploiting vulnerabilities including business logic flaws and authentication issues
Conduct infrastructure testing (internal/external networks, Active Directory, perimeter systems) and cloud security assessments (AWS, Azure), applying threat-led or adversary simulation techniques where relevant
Develop scripts and tools to improve testing efficiency and own end-to-end delivery of engagements (planning, execution, reporting, and close-out) with clear, structured reports and actionable remediation guidance
Present findings to technical and non-technical stakeholders; collaborate with internal teams, support pre-sales activities when needed, and contribute to knowledge sharing, playbooks, and mentoring junior team members
Job description
This is a remote position.
We are looking for a skilled and curious Security Analyst (Penetration Tester) to join a high-performing offensive security team.
This role focuses on delivering high-quality penetration testing across web, mobile, API, infrastructure, and cloud environments, helping clients identify vulnerabilities and reduce real-world risk.
You will work closely with internal teams and clients, contributing not only to testing engagements but also to research, tooling, and continuous improvement. This role is ideal for someone who is hands-on, analytical, and passionate about cybersecurity.
Work setup: Remote
Type: Full-time
Your Duties
As a Security Analyst (Penetration Tester), you will be responsible for:
Perform manual-first penetration testing across web, API, and mobile (iOS/Android) applications
Identify and exploit vulnerabilities including business logic flaws, authentication issues, and attack chains (e.g., IDOR)
Conduct infrastructure testing (internal/external networks, Active Directory, perimeter systems)
Perform cloud security assessments (AWS, Azure)
Apply threat-led and adversary simulation techniques where relevant
Develop scripts and tools to improve testing efficiency and quality
Own end-to-end delivery of engagements (planning, execution, reporting, and close-out)
Produce clear, structured reports with risk ratings and actionable remediation guidance
Present findings to both technical and non-technical stakeholders
Collaborate with internal teams and support pre-sales activities when needed
Contribute to internal knowledge sharing, playbooks, and mentoring junior team members
Requirements
2+ years of hands-on experience in penetration testing (Mid to Senior level: 2–6+ years preferred)
Strong understanding of OWASP Top 10, ASVS, and API Security Top 10
Experience with manual testing techniques, including vulnerability chaining and exploitation
Proficiency with tools such as Burp Suite, Nmap, Kali Linux, and scripting (Python or PowerShell)
Experience in web, API, and at least one of the following: mobile, infrastructure, or cloud testing
Strong analytical and problem-solving skills
Excellent written and verbal communication in English
Ability to clearly communicate technical risks and remediation steps
Strong attention to detail and structured documentation skills
Ability to work independently and as part of a team
