penetration tester

Giza Systems EG

<div><h4 class="jobSectionHeader"><b>Job Description</b></h4>
 <p></p><div><p>The Senior Penetration Tester conducts advanced penetration testing and vulnerability assessments across various environments, identifying security weaknesses and providing clear, actionable reports to help clients strengthen their security posture.&middot;</p>
<ul>
<li> Analyze and study technical architecture, configurations, and documentation to fully understand system environments prior to performing security assessments.</li>
<li>Identify, exploit, and document vulnerabilities using industry-standard and custom tools.</li>
<ul><li>Conduct advanced penetration tests on web applications, mobile apps, networks, cloud environments, APIs, IoT devices, and infrastructure.</li></ul>
<li>Validate remediation efforts and provide re-testing to ensure vulnerabilities are fully resolved.</li>
<li>Perform social engineering assessments, phishing simulations, and physical security tests when required.</li>
<li>Stay current with emerging threats, vulnerabilities, exploit techniques, and offensive security tools.</li>
<li>Mentor junior penetration testers and support internal knowledge-sharing initiatives.</li>
<li>Contribute to research projects, whitepapers, or industry events when applicable.</li>
<li>Participate in client kickoff meetings, scoping sessions, and technical discussions, applications walkthroughs, and technical discussions.</li>
<li>Prepare detailed penetration testing reports, including technical findings, risk ratings, evidence, and tailored recommendations.</li>
<li>Present results to technical teams and senior leadership, offering clear and actionable improvement strategies.</li>
</ul></div><p></p>
<h4 class="jobSectionHeader"><b>Personal Skills</b></h4>
<p></p><div><ul><li> <i>Strong analytical and problem-solving skills to assess complex systems and identify security weaknesses.</i></li></ul>
<ul><li> <i>Excellent communication abilities to clearly present technical findings to both technical and non-technical clients.</i></li></ul>
<ul><li> <i>High attention to detail in testing, documentation, and reporting.</i></li></ul>
<ul><li> <i>Effective time and project management to handle multiple assessments and meet deadlines.</i></li></ul>
<ul>
<li><i>Professional client engagement and teamwork with the ability to collaborate effectively and maintain confidentiality.</i></li>
</ul></div><p></p>
<h4 class="jobSectionHeader"><b>Technical Skills</b></h4><br>
<p></p><div><div><br>
&amp;middot; Must have experience in pen testing and/or red teaming engagements, not just bug bounty and CTF.
<br>
<ul><li>Advanced knowledge of penetration testing methodologies</li><li>In-depth understanding of network protocols and systems</li><li>Proficiency in using penetration testing tools such as Metasploit, Nmap, and Burp Suite.
</li><li>Strong knowledge of security frameworks and standards (e.g., OWASP, NIST).
</li><li>Experience in conducting application security assessments and vulnerability assessments.
</li><li>Ability to analyze and report on security findings in a clear and concise manner.
</li><li>Expertise in social engineering techniques and physical security assessments.
</li><li>Relevant certifications such as CEH, OSCP, or CISSP would be a plus</li><li>At least 3 years combined experience in Mobile Application penetration testing and the at least 2 of the following:</li><li>Web application penetration testing</li><li>Network/infrastructure penetration testing</li><li>OT/ICS penetration testing.
</li><li>Source code review for control flow and security flaws</li></ul>
Previous experience in at least 2 of the following<br>
Shell scripting or automation of simple tasks.<br>
Developing, extending, or modifying exploits, shellcode or exploit tools.<br>
Application development (web/mobile)<br>
Malware reverse engineering.<br>
Vulnerability assessment / Security assessment tools<br>
Cloud / Systems administration.</div></div><br>
<p></p>
<h4 class="jobSectionHeader"><b>Education</b></h4>
<div><p>Bachelor&rsquo;s degree in Cybersecurity, Computer Science, or Information Security</p></div></div><p></p>
<br><div><h4 class="jobSectionHeader"><b>Job Details</b></h4>
<div><div>Job Location</div>
<div>Cairo, Egypt</div>
</div><div><div>Company Industry</div>
<div>IT Services</div>
</div><div><div>Company Type</div>
<div>Employer (Private Sector)</div>
</div><div><div>Job Role</div>
<div>Engineering</div>
</div><div><div>Employment Type</div>
<div>Employee</div>
</div><div><div>Job Division</div>
<div>Jafeer</div></div></div>
<br><div><h4 class="jobSectionHeader"><b>Preferred Candidate</b></h4>
<div><div>Career Level</div>
<div>Mid Career</div>
</div><div><div>Years of Experience</div>
<div>Min: 5 Max: 8</div>
</div><div><div>Nationality</div>
<div>Egypt</div>
</div><div><div>Degree</div>
<div>Bachelor's degree</div></div></div>

Senior Penetration Tester

CYREX

<div><p>Cyrex, a Magic Media company, is a media and tech start-up powered by creativity and innovation. We work with leading developers and publishers in the games industry, providing support and solutions designed around individual needs and carried out by global experts.</p><p>
We produce high-quality results by constantly staying at the forefront of modern technology and cutting-edge processes and practices. The best of our team are known for their strong initiative, not just in taking care of their day-to-day responsibilities but in helping identify ways to build, grow, and do more in their work.</p><p>
We&rsquo;re currently looking for a dynamic addition to the team to help work on exciting cybersecurity and development projects for the video games industry. The ideal candidate will work with cross-functional teams to develop critical products and services for our clients and offer excellent technical support to our teams. If you&rsquo;re an enthusiastic, motivated, and lateral thinker, our team is waiting to meet you!</p><p>
This is a project based position, ideal for someone skilled in web security, mobile hacking, and basic cloud security. It does not require deep knowledge of reverse engineering or low-level networking.</p><h3 class="jobSectionHeader"><b>
Responsibilities</b></h3><ul>
<li>Penetration testing of web apps, mobile apps and REST &amp; GraphQL APIs.</li>
<li>Review source code for security issues.</li>
<li>Assess mobile app protections (certificate pinning, jailbreak/root detection, code obfuscation) and backend integrations.</li>
<li>Produce clear reports with PoCs and remediation guidance; verify fixes.</li>
</ul><p><b>
Requirements</b></p><ul>
<li>
5+ years in web and mobile penetration testing.</li>
<li>Strong OWASP Top 10 knowledge.</li>
<li>Basic cloud security knowledge.</li>
<li>Manual testing first mindset, deep burp suite knowledge.</li>
<li>Reporting: clear flaws write-ups.</li>
<li>Source code review skills: sinks/sources, ability to spot misconfigurations.</li>
</ul><h3 class="jobSectionHeader"><b>Working knowledge of</b></h3><ul>
<li>Basic python skills.</li>
<li>Frida, apktool, jadx</li>
<li>Burp suite plugins creation would be a plus.</li></ul><p><b>
Benefits</b></p><ul>
<li>
An opportunity to hone and improve your skills by applying them to a diverse variety of gaming projects</li>
<li>The chance to work closely with a team of like-minded creative professionals in a fast-paced, multicultural environment on a variety of gaming projects</li>
<li>A competitive salary</li>
<li>Ongoing training and professional self-improvement opportunities</li>
</ul><p>
If this sounds interesting to you and you&rsquo;d like to be at the forefront of cybersecurity, we&rsquo;d love to hear from you.</p></div>

Web Penetration Tester

OMNIVERSE

<div>
 <p>
  <strong>
   Company Description
  </strong>
 </p>
 <p>
  OMNIVERSE&rsquo;s cybersecurity consulting services enable organizations to navigate uncertainty, manage cyber risk, and build resilience in an increasingly complex digital environment.&nbsp;Designed to support organizations at every stage of their cybersecurity maturity, our services combine strategic insight with real-world threat perspective. We help leaders anticipate emerging risks, strengthen security posture, and make informed decisions amid rapid technological and market change.&nbsp;Through a pragmatic and strategy-led approach, OMNIVERSE simplifies complex security challenges, aligns cyber initiatives with business objectives, and enables organizations not only to respond to disruption, but to operate with confidence and intent. Headquartered in Istanbul, OMNIVERSE partners with organizations seeking clarity, resilience, and forward-looking cybersecurity leadership.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Role Description
  </strong>
 </p>
 <p>
  This is a full-time Senior/Mid-Level Penetration Tester position based in Turkey, primarily remote with limited on-site requirements. The Penetration Tester will identify and assess security vulnerabilities, conduct penetration tests on applications. Additional responsibilities include compiling detailed reports, developing solutions to mitigate risks, and collaborating with cross-functional teams to ensure security compliance and best practices.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Qualifications
  </strong>
 </p>
 <ul>
  <li>
   Strong expertise in Web/API Application Penetration Testing
  </li>
  <li>
   Proficiency in Application Security
  </li>
  <li>
   Ability to effectively analyze vulnerabilities and recommend actionable solutions
  </li>
  <li>
   Familiarity with industry-standard tools and frameworks for penetration testing
  </li>
  <li>
   Strong problem-solving skills and attention to detail
  </li>
  <li>
   Proven ability to work both independently and collaboratively on complex security projects
  </li>
  <li>
   Relevant certifications such as OSCP, TSE, OSWE, OSWA
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  We are looking for individuals with a continuous learning mindset, strong analytical and investigative capabilities, and the persistence required to follow leads through to meaningful outcomes.
 </p>
</div>


Penetration Tester (Consultant/Senior Consultant/Expert)

United Sol (Pvt.) Ltd

<p>Conduct authorized security assessments against web, cloud, and infrastructure targets to identify vulnerabilities, verify exploitability, and deliver actionable remediation guidance.</p><p>Responsibilities</p><ul><li>Plan and execute agreed penetration tests (web apps, APIs, cloud, networks) under rules of engagement.</li><li>Produce clear technical reports with risk rating, reproduction steps, and remediation recommendations.</li><li>Work with engineering teams to validate fixes and re-test.</li><li>Keep tools, techniques, and test methodology up to date; contribute to internal playbooks.</li></ul><p>Required</p><ul><li>3+ years in offensive security/penetration testing or red-team engagements.</li><li>Strong web app, network, and host testing experience; familiarity with common tools and manual testing techniques.</li><li>Experience producing clear technical and executive reports.</li><li>Bachelor&rsquo;s in CS/IT or equivalent experience.</li></ul><p>Desired</p><ul><li>OSCP, OSWE, CREST, eJPT or similar certification.</li><li>Experience with cloud (AWS/Azure/GCP) security testing.</li></ul><p>Compliance</p><p>All work is strictly authorized and performed under approved scopes and legal agreements.</p><p>Job Type: Full-time</p><p>Work Location: In person</p>

Penetration Tester (Offensive Security)

KeyBank

<b>Location:</b><br>
4910 Tiedeman Road, Brooklyn Ohio
<br><br>
Job Profile Summary
<br><br>
Serves as a senior technical lead for application security pen tests, secure code reviews, application design reviews, threat modeling, and processes, tools, and security automation for the Corporate Information Security (CIS) Cyber Application and Cloud Defense team. Works closely with cloud, SaaS, and policy as code programs to ensure secure configuration baselines are defined, implemented, and monitored. All associated efforts are to promote and advance information security processes and culture, and must reflect compliance with best practices, applicable federal and industry regulations, as well as company information security policies and standards.
<br><br>
Job Description
<br><br>
<b>Required Qualifications:</b><br>
Bachelor's degree preferred; equivalent experience of 8 or more years of combined experience within information technology or information security is acceptable
<br>Qualified candidate will include 8+ years of broadly based progressive experience in information systems or information security environments or software engineering
<br>Qualified candidate must have experience or be well-versed in development technologies such as Java, Node, or .NET frameworks and have a thorough understanding of web application design and frameworks.
<br>Qualified candidate must be able to perform comprehensive static, dynamic, and manual application testing following industry-standard testing methodologies and has experience with one or more application review tools such as Snyk, Fortify, Checkmarx, Veracode, Burp Suite, Webinspect, Prisma Cloud, Prisma Compute, Cortex Cloud, CI/CD pipelines, or GitLab security scanners.
<br>Ability to be a technical lead for an enterprise-wide information security program and processes related to comprehensive application security testing, secure application design, application threat modeling, cloud security, SaaS security, and AI security.
<br>A strong drive to follow new and emerging technologies and application design patterns, assess potential risks, and proactively drive adoption and implementation of appropriate controls by development and infrastructure teams
<br>Must be able to use command line tools on Mac workstations.
<br>Ability to write shell scripts, python scripts, PowerShell scripts, CI/CD pipeline tasks and implement automation workflows using APIs
<br>Ability to build and sustain collaborative relationships with multiple constituencies
<br>Ability to translate information security terminology into terms understandable to diverse groups
<br>Excellent written and oral communication skills
<br>Excellent analytical and problem-solving skills
<br>Excellent facilitation and negotiation skills
<br>Ability to work independently
<br>Ability to multi-task and manage competing priorities
<br>Detail oriented
<br>Commitment to teamwork
<br>Ability to drive Continuous Improvement efforts
<br><br>
Preferred Skills
<br>Background in application security, application design patterns, DevSecOps practices, cloud security, DevSecOps practices, SaaS security, and AI security
<br>Strong technical knowledge of application development practices and ability to work closely with development and infrastructure teams
<br>Ability to threat model applications and emerging technologies
<br>Knowledge of existing AI design patterns, risks, and controls
<br>Knowledge of AI-related attacks and ability to pen test applications using AI technology
<br>Able to guide application and infrastructure teams on application security remediation
<br>Able to manage development projects with work intake, sprints, and planned releases
<br>Background in information security and or organizational communication within the financial services industry
<br>Understanding of federal and industry regulations associated with information security, such as Sarbanes-Oxley, HIPAA, GLBA, etc.
<br>Understanding of application security and cloud security frameworks and standards, such as NIST, CIS, CSA, OWASP, etc.
<br>Knowledge of systems architecture such as network and distributed systems, and or mainframe systems
<br>Knowledge of security services such as firewalls, IDS, vulnerability assessment, and authentication
<br>Professional certification (GWAPT, OSWE, BSCP, CISSP, or Google Professional Cloud Security Engineer) is desirable
<br><br>
<b>Essential Job Function:</b><br>
Conducts comprehensive application security testing
<br>Participates in application threat modeling and tabletop exercises
<br>Coordinates the development, implementation, and administration of application security policies and standards
<br>Coordinates and oversees the work of junior team members in application security
<br>Development and other operational tasks to maintain the Application Security testing and DevSecOps program within the Cyber Application and Cloud Defense team
<br>Coordinates remediation prioritization and triage efforts for the application security program
<br>Coordinates the development, implementation, and promotion of effective information security awareness within the organization with the goal of making all employees, contractors, alliances, and other third parties security aware
<br>Monitors compliance with the organization's information security policies and standards among employees, contractors, alliances, and other third parties, facilitating remediation by referring problems to appropriate department managers for resolution
<br>Promotes the availability, integrity, and confidentiality of company data, regardless of medium
<br>Provides direction, guidance, and opinions regarding information security awareness, communication, policies, and standards
<br>Assists with the development of information security training to all employees, contractors, alliances, and other third parties, as required. Ensures sponsored training conforms to existing policies and standards
<br>Directs the timely dissemination of information security information
<br>Serves as an internal information security consultant and liaison to all areas of the organization as a daily activity
<br>Communicate the practical implications of information security decisions, issues, and plans to the organization
<br>Monitors advancements in information security methodologies and technologies
<br>Monitors changes in legislation standards that may affect information security
<br>Participates in enterprise-wide information security architecture discussions, as required
<br>Selects and or works with external vendors, outside consultants, and other third parties to improve information security, as required
<br>Attends conferences and training as required to maintain proficiency
<br><br>
COMPENSATION AND BENEFITS
<br>This position is eligible to earn a base salary in the range of $94,000.00 - $175,000.00 annually. Placement within the pay range may differ based upon various factors, including but not limited to skills, experience and geographic location. Compensation for this role also includes eligibility for incentive compensation subject to individual and company performance.
<br>Please click here for a list of benefits for which this position is eligible.
<br><br>
Key has implemented an approach to employee workspaces which prioritizes in-office presence, while providing flexible options in circumstances where roles can be performed effectively in a mobile environment.
<br><br>
<b>Job Posting Expiration Date:</b> 01/21/2026
<br><br>
KeyCorp is an Equal Opportunity Employer committed to sustaining an inclusive culture. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, genetic information, pregnancy, disability, veteran status or any other characteristic protected by law.
<br>Qualified individuals with disabilities or disabled veterans who are unable or limited in their ability to apply on this site may request reasonable accommodations by emailing HR_Compliance@keybank.com.
<br><br>
#LI-Remote

Sr Application Penetration Tester

TEKHQS

<div>
 <strong>
  About The Role
  <br/>
  <br/>
 </strong>
 We are looking for a skilled and detail-oriented
 <strong>
  Penetration Tester / Ethical Hacker
 </strong>
 with strong expertise in cybersecurity, vulnerability assessments, and security auditing. The ideal candidate should be capable of identifying security weaknesses, performing controlled exploits, and providing actionable remediation recommendations to enhance the organizations security posture.
 <br/>
 <br/>
 <strong>
  Key Responsibilities
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Perform penetration testing across web applications, mobile apps, APIs, networks, cloud, and infrastructure.
  </li>
  <li>
   Conduct vulnerability assessments, risk analysis, and security audits.
  </li>
  <li>
   Identify, exploit, and validate real-world security vulnerabilities using industry-standard tools and techniques.
  </li>
  <li>
   Prepare detailed reports, including proof of concepts, impact analysis, and remediation steps.
  </li>
  <li>
   Work closely with development, DevOps, and IT teams to close vulnerabilities and improve security maturity.
  </li>
  <li>
   Perform threat modeling, attack simulations, and red team exercises.
  </li>
  <li>
   Monitor emerging cyber threats and propose security improvements.
  </li>
  <li>
   Ensure compliance with relevant frameworks (ISO 27001, NIST, CIS, SOC2, etc.).
  </li>
  <li>
   Help implement security best practices across the organization.
   <br/>
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Required Skills &amp; Qualifications
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Strong knowledge of penetration testing methodologies (OWASP, PTES, MITRE ATT&amp;CK).
  </li>
  <li>
   Proficiency with tools such as:
  </li>
  <ul>
   <li>
    Burp Suite
   </li>
   <li>
    Metasploit
   </li>
   <li>
    Kali Linux
   </li>
   <li>
    Nessus / OpenVAS
   </li>
   <li>
    Wireshark
   </li>
   <li>
    Nmap
   </li>
   <li>
    Nikto
   </li>
   <li>
    Hydra, John the Ripper, Hashcat
    <br/>
   </li>
  </ul>
  <li>
   Strong understanding of:
  </li>
  <ul>
   <li>
    Web security
   </li>
   <li>
    Network security
   </li>
   <li>
    Linux &amp; Windows environments
   </li>
   <li>
    Scripting (Python, Bash, PowerShell)
    <br/>
   </li>
  </ul>
  <li>
   Ability to write clear and professional audit/security reports.
  </li>
  <li>
   Excellent problem-solving, analytical, and communication skills.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Preferred Qualifications
  <br/>
  <br/>
 </strong>
 <li>
  Prior experience in Red Team / Blue Team operations.
 </li>
 <li>
  Knowledge of cloud platforms (AWS, Azure, GCP).
 </li>
 <li>
  Experience with SIEM, IDS/IPS, Firewall configurations.
 </li>
 <li>
  Certifications (Plus point):
 </li>
 <ul>
  <li>
   CEH (Certified Ethical Hacker)
  </li>
  <li>
   OSCP
  </li>
  <li>
   eJPT / eWPT
  </li>
  <li>
   Security+
  </li>
  <li>
   CISA / CISM
  </li>
  <li>
   ISO 27001 Lead Auditor
  </li>
  <li>
   Location: Lahore/Islamabad/Karachi (Remote)
  </li>
  <li>
   Type: Part-time
  </li>
  <li>
   Experience: 5+ Years
  </li>
  <li>
   Department: Information Security &amp; Compliance
   <br/>
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  About Us:
  <br/>
  <br/>
 </strong>
 TEKHQS is a global technology solutions provider headquartered in Lake Forest, California, with a 300+ expert team in Pakistan. We specialize in ERP (SAP S/4HANA, Oracle NetSuite, Microsoft Dynamics 365), AI/ML, Blockchain, Cloud, and Staff Augmentation services. Join us to drive business growth and work on cutting-edge global IT projects with hands-on mentorship and a clear career path.
</div>


Penetration Tester / Ethical Hacker / Security Analyst

DICETEK LLC

<div><p><b>Key Responsibilities</b></p><ul><li>
Conduct advanced penetration tests for web applications, APIs, networks, and infrastructure systems.</li><li>
Perform vulnerability scanning, assessment, and exploitation using industry-standard tools.</li><li>
Conduct in-depth security assessments to identify weaknesses in applications and infrastructure.</li><li>
Prepare detailed technical reports and executive-level summaries.</li><li>
Collaborate with development, IT, and infrastructure teams to remediate identified issues.</li><li>
Design and maintain test cases, scripts, and security toolsets.</li><li>
Develop and improve internal security testing methodologies and best practices.</li><li>
Ensure compliance with security policies, frameworks, and regulatory requirements.</li><li>
Provide security recommendations and enhancements to strengthen overall security posture.</li></ul><p>
</p><p><b>Basic Requirements</b></p><ul><li>
5 or more years of experience in Application Security &amp; Infrastructure Security VAPT.</li><li>
Bachelor&rsquo;s degree or above in Computer Science, Information Security, or a related field.</li><li>
Relevant certifications such as OSCP, CEH, CISSP, CISA, CRTP, GWAPT, GMOB, or GIAC are preferred.</li><li>
Strong knowledge of Web , Mobile &amp; AI Application Security (OWASP Top 10), Secure Code Review, API Security, Cloud Security (AWS, Azure, GCP), and Infrastructure Security.</li><li>
Experience with security tools such as Burp Suite, SonarQube, Fortify, Metasploit, Nessus, Qualys, Nmap, Acunetix, ZAP, and Kali Linux.</li><li>
Understanding of data protection regulations (UAE- IA, ISO 27001, NIST, PCI-DSS, etc.).</li><li>
Strong technical writing and documentation skills.</li><li>
Scripting experience in Python or Bash.</li></ul><p></p><p><b><br>
Preferred Qualifications</b></p><ul><li>
Relevant certifications such as OSCP, OSWE, CEH, or experience in Red Team operations.</li><li>
Experience performing security testing in cloud environments (AWS / Azure).</li></ul></div><p></p>

Penetration Tester/ Cyber Security Consultant

Search 671+ Penetration tester jobs near you this December. New roles added regularly across leading industries. Apply today.