Senior Specialist, Penetration Tester

Positions: 2 (full-time)

Experience: 4–6 years

Role Overview

We are seeking an experienced Security Consultant to lead advanced penetration testing engagements, perform complex security assessments, and provide technical leadership across application and infrastructure security.

Key Responsibilities

• Lead advanced penetration testing of web applications, APIs, mobile applications, networks, Active Directory, and cloud environments.
• Identify and exploit complex vulnerabilities, business logic flaws, privilege escalation opportunities, and chained attack scenarios.
• Perform advanced web application exploitation, source code analysis, and security testing.
• Conduct technical reviews of assessment findings and penetration testing reports.
• Define testing approaches, validate vulnerabilities, and provide actionable remediation recommendations.
• Lead client technical discussions, present findings, and support remediation activities.
• Mentor penetration testers and contribute to methodologies and technical capability development.
• Support technical scoping, effort estimation, and pre-sales activities.

Required Skills and Qualifications

• At least 4 years of hands-on penetration testing experience.
• One of the following certifications is mandatory: OSEP, OSWE, CREST CCT APP, CREST CCT INF, or GIAC GXPN.
• Strong expertise in advanced web application and API penetration testing.
• Proven experience in internal and external network penetration testing, Active Directory, and privilege escalation.
• Excellent technical report-writing, communication, and client management skills.
• Demonstrated ability to lead complex assessments and mentor technical teams.