5000 USD – 8000 USD 🌎 Remote, Full-time

We are looking for an experienced Penetration Tester who will be responsible for identifying, verifying, and supporting the remediation of vulnerabilities in various internal company projects and client environments. This role is suitable for a specialist who combines strong practical offensive security skills with the ability to manually validate vulnerabilities and clearly communicate results to technical teams.

📝 Responsibilities: • Conduct penetration testing of web applications, APIs, networks, infrastructure, Active Directory, and other systems. • Identify vulnerabilities using both automated tools and manual testing techniques. • Validate found vulnerabilities, confirm their real impact, and exclude false positives. • Assess vulnerabilities from the perspective of common attack techniques and security risks. • Provide clear and practical recommendations for vulnerability remediation to Development and IT teams. • Prepare structured reports on penetration testing results for internal stakeholders and clients. • Conduct re-testing after vulnerabilities have been remediated. • Participate in improving internal security testing approaches and methodologies.

🎯 Requirements: • 3+ years of practical experience in penetration testing, ethical hacking, or offensive security. • Strong knowledge in the following areas:

• Web Application Penetration Testing
• API Security Testing
• Network Penetration Testing
• Active Directory Security Testing • Practical experience with tools such as Burp Suite, Nmap, Metasploit, Nuclei, and similar. • Ability to manually verify vulnerabilities and distinguish real security issues from false positives. • Good understanding of OWASP Top 10 and common attack techniques. • Experience in preparing technical reports on penetration testing results. • Strong analytical skills and the ability to solve technical problems. • Ability to clearly explain security findings to both technical and non-technical stakeholders.

✅ Certifications: • OSCP will be a big advantage. • OSWE, OSEP, PNPT, or other similar practical offensive security certifications will also be a significant plus. ​​​​​​​ 🔎 Will be an advantage • Experience working with both internal corporate environments and external client projects. • Experience testing complex or distributed infrastructure. • Understanding of vulnerability management and remediation processes. • Experience in close collaboration with Development, DevOps, Infrastructure, and Security teams.