Penetration Testing Expert

🚀 We're Hiring: Penetration Testing Expert Are you passionate about offensive security and eager to help organizations strengthen their cyber resilience? We are looking for an experienced Penetration Testing Expert to join a high-performing cybersecurity team and drive advanced security assessments across applications, infrastructure, and cloud environments. 🔍 Key Responsibilities • Conduct web application penetration tests to identify vulnerabilities related to authentication, authorization, input validation, and business logic. • Assess applications against industry-recognized security standards and best practices, including the OWASP Top 10. • Perform network, infrastructure, and system penetration testing to uncover security weaknesses, misconfigurations, unpatched vulnerabilities, and credential-related risks. • Leverage industry-leading security tools such as Kali Linux, Nmap, Burp Suite, Nessus, and Metasploit to execute both manual and automated assessments. • Produce high-quality technical reports detailing findings, risk levels, potential business impact, and remediation recommendations. • Collaborate closely with Security, IT, and Engineering teams to support remediation efforts while ensuring minimal impact on business operations. • Contribute to the continuous improvement of penetration testing methodologies and actively share knowledge within the team. ✅ Profile & Experience • Bachelor's or Master's degree in Computer Science, Information Technology, Cybersecurity, or a related field. • Minimum 5 years of experience in penetration testing and vulnerability assessments. • Strong understanding of security assessment methodologies, including vulnerability assessments, risk assessments, and threat modeling. • Relevant security certifications in penetration testing or offensive security are highly valued. 🛠 Technical Skills • Strong hands-on experience with tools such as Nmap, Nessus, Burp Suite, Metasploit, and Kali Linux. • Deep understanding of network protocols and architectures (TCP/IP, DNS, HTTP/HTTPS). • Proven experience in manual exploitation, proof-of-concept development, and advanced attack techniques. • Expertise in web application security testing, API security testing, authentication bypass, and OWASP-based assessments. • Familiarity with Windows, Linux, and macOS environments. • Scripting skills in Python, Bash, PowerShell, or JavaScript. • Solid knowledge of Active Directory, LDAP, and privilege escalation techniques. • Experience with cloud security (AWS, Azure, GCP) and containerized environments (Docker, Kubernetes). • Strong documentation and reporting capabilities. 🤝 Soft Skills • Excellent communication and stakeholder management skills. • Strong analytical mindset with the ability to translate technical findings into actionable recommendations. • Collaborative team player comfortable working in cross-functional and multicultural environments. • Passion for continuous learning and knowledge sharing. 🌍 Languages • English: Mandatory • French: Nice to have