penetration tester

malomatia

<div>
 <strong>
  Job Description
  <br/>
  <br/>
 </strong>
 We are seeking a skilled
 <strong>
  Application Security Specialist
 </strong>
 to join our Cybersecurity Practice. In this role, you will work closely with our application security, development, and QA teams to secure our clients&rsquo; applications across their entire lifecycle. You will conduct security testing, perform penetration tests, and assess vulnerabilities across web, mobile, API applications.
 <br/>
 <br/>
 Your responsibilities will span application penetration testing, automated security scanning (SAST, DAST, SCA), threat modelling, secure code review, and developer enablement. You will embed security best practices throughout the software development lifecycle and ensure that applications are designed and built with robust security controls.
 <br/>
 <br/>
 You will collaborate with development and DevOps teams to integrate security into CI/CD pipelines, triage and validate findings, and provide clear, actionable remediation guidance. The role requires hands-on technical expertise, strong analytical skills, and the ability to translate complex security findings into practical fixes that developers can implement.
 <br/>
 <br/>
 <strong>
  Responsibilities
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Penetration Testing:Conduct penetration tests on web applications, mobile applications, APIs, and thick-client applications. Prepare detailed reports with clear risk ratings and actionable remediation recommendations.
  </li>
  <li>
   Security Scanning:Implement, tune, and manage automated security scanning tools (SAST, DAST, SCA) to continuously identify vulnerabilities in code, configurations, and third-party dependencies across all application types.
  </li>
  <li>
   Threat Modelling:Perform threat modelling to identify potential security risks and attack surfaces associated with applications early in the design process, and provide guidance on mitigating these risks.
  </li>
  <li>
   Secure Code Review:Review application source code for security vulnerabilities across multiple platforms and languages, and offer practical, developer-friendly recommendations for remediation.
  </li>
  <li>
   DevSecOps Integration:Integrate security testing and controls into CI/CD pipelines, enabling continuous and automated security validation as part of the development workflow.
  </li>
  <li>
   Training &amp; Awareness:Develop and deliver secure coding training sessions and workshops to raise application security awareness among development teams and other stakeholders.
  </li>
  <li>
   Tool Evaluation:Assess and recommend tools and technologies to enhance application security testing and monitoring capabilities across various platforms.
  </li>
  <li>
   Documentation:Create and maintain comprehensive documentation related to security assessments, vulnerability management, and application security standards and policies.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Qualifications
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Education: Bachelor&rsquo;s / college degree in Computer Science, Information Security, or a related field.
  </li>
  <li>
   Experience: At least 3 years of experience in application security, secure software development, penetration testing, or a closely related field.
  </li>
  <li>
   Certifications: Relevant professional certifications are highly desirable. These may include, but are not limited to:
  </li>
  <ul>
   <li>
    OffSec certifications (e.g., OSWA, OSWE)
   </li>
   <li>
    eLearnSecurity (e.g., eWPT, eWPTX)
   </li>
   <li>
    GIAC / SANS (e.g., SEC542, GWAPT)
   </li>
   <li>
    BCSP or other application security certifications.
   </li>
  </ul>
  <li>
   Technical Skills: Proficiency with security testing tools such as Burp Suite (required), and familiarity with Snyk, HCL AppScan, Fority, and Postman (preferred). Strong understanding of secure coding practices and hands-on experience with at least one programming language. Familiarity with DevSecOps practices and CI/CD pipelines is preferred.
  </li>
  <li>
   Knowledge: In-depth knowledge of application security principles and practices, with strong familiarity with security frameworks and guidelines (e.g., OWASP Top 10, ASVS, MASVS, WSTG, MSTG). Understanding of common vulnerability classes, exploitation techniques, and remediation strategies. Knowledge of Qatar National Information Assurance (NIA) is a plus.
  </li>
 </ul>
</div>


Application Security

CureMD

<div><p><b>Job Overview:</b></p><p></p><p>
The Application Security Analyst at CureMD is a crucial member of our security team responsible for safeguarding our applications, data, and systems against potential security threats and vulnerabilities. This position offers a unique opportunity for professional growth and skill development within the field of application security. As an Application Security Analyst, you will work under the guidance of experienced security professionals, gaining hands-on experience in identifying and addressing security risks.</p><p></p><p><b>
Job Responsibilities:</b></p><p></p><ul><li>
Security Assessments.</li><li>
Ability to exploit recognized vulnerabilities and discover new vulnerabilities.</li><li>
Analyzing and auditing the Source code of the Web/Mobile Application.</li><li>
Proficiency in scripting, Unix operating systems and windows.</li><li>
Proficient in Linux operating system configuration, utilities, and programming,</li><li>
Conducted manual external and internal penetration testing.</li><li>
Conduct Penetration testing/ Vulnerabilities Assessment for Cloud based web, desktop, and mobile apps.</li><li>
Perform static and dynamic code testing, manual code inspection, threat modeling, design reviews to identify vulnerabilities and security defects</li><li>
Keep up with the latest methods for ethical hacking and testing and are always evaluating new penetration testing tools</li><li>
Collaborate with other team members and stakeholders</li><li>
Assist in Security operational tasks.</li></ul><p></p><p><b>
Qualifications</b>:</p><p></p><ul><li>
Bachelors in Information/Cyber Security, Information Technology, Computer Science or Software Engineering with majors in Information Security.</li><li>
Having 1 - 2 years of relevant experience</li><li>
Good understanding of security tools and technologies for performing Penetration Testing.</li><li>
Have Knowledge of different coding languages.</li><li>
Experience in testing business critical environments.</li><li>
CEH or any other related professional certification.</li><li>
Solid understanding of information security and applied cryptographic protocols.</li><li>
Good knowledge of security technologies for secure software development such as cryptography, authentication techniques and protocols etc.</li><li>
Having OWASP top ten vulnerabilities Knowledge.</li><li>
Good to understand tools and technologies for performing Penetration Testing.</li></ul><p></p><p><b>
Compensation and Benefits:</b></p><p></p><p><b>
Financial:</b></p><p></p><ul><li>
Competitive salary and bi-annual bonus.</li><li>
Fast track and uncapped career growth for high performers.</li><li>
Company-sponsored vehicle financing (car and bike).</li><li>
Interest-free loans.</li><li>
Provident Fund: CureMD matches up to 8% of your base salary.</li></ul><p></p><p><b>
Health and Wellness:</b></p><p></p><ul><li>
In-house clinic with a team of certified male and female doctors with 24/7 telemedicine service.</li><li>
Hospital treatment monitoring by company doctors.</li><li>
Comprehensive health coverage for your immediate family (outpatient, inpatient, maternity and parents' inpatient).</li><li>
Exclusive health benefits and discounts at top class clinics and labs.</li></ul><p></p><p><b>
Supportive Workplace:</b></p><p></p><ul><li>
Pick-up and drop-off services for female employees.</li><li>
In-house daycare facility.</li><li>
In-house gym and recreational area to unwind.</li></ul><p></p><p><b>
Continued Learning:</b></p><p></p><ul><li>
Company-sponsored trainings, workshops, development programs and retreats.</li><li>
Paid specialized trainings/certifications.</li></ul><p></p><p><b>
The Difference You&rsquo;ll Make:</b></p><p><br>
At CureMD, every role, whether senior or junior, plays a pivotal part in transforming healthcare. By joining our innovative team, you&rsquo;ll contribute to groundbreaking technology that directly impacts patient care, enhances healthcare efficiency, and saves lives globally. Your skills and passion will drive meaningful change, helping us deliver solutions that support healthcare professionals in critical, real-time settings. Together, we&rsquo;re not just advancing technology &mdash; we&rsquo;re making a tangible difference in people&rsquo;s lives. <b>Together, Let&rsquo;s save lives.</b></p></div>

Application Security Analyst

GovCIO

<div>Overview:
<div>
GovCIO is currently hiring for a remote Cyber Threat Analyst to support the US Courts. This position will be within United States and will be fully remote.
</div>Responsibilities:
<div>
The Threat Intel Analyst will use their expert knowledge of malicious software to research and analyze cyber threats, report their findings, use their intelligence to predict similar attacks, and help to counter the activities of cybercriminals for the organization.</div><div></div><div><br>
Job duties include:</div><ul><li>
Conduct cyber threat analysis, identify mitigation and/or remediation courses of action; develop actionable intelligence used to protect organizational IT assets</li><li>
Utilize Threat Intelligence and Threat Models to create threat hypotheses</li><li>
Prepare and report risk analysis and threat findings</li><li>
Create, recommend, and assist with development of new security content as the result of hunt missions to include signatures, alerts, workflows, and automation</li><li>
Coordinate with different teams to improve threat detection, response, and improve overall security posture of the Enterprise</li><li>
Proactively and iteratively search through systems and networks to detect advanced threats</li><li>
Analyze host, network, and application logs in addition to malware and code</li><li>
Identify, track and investigate high priority threat campaigns, malicious actors with the interest, capability and TTPs (Techniques, Tactics and Procedures)</li><li>
Bring a comprehensive understanding, analyzing and tracking the cyber threat landscape, including identifying and analyzing cyber threats actors, APT TTPs and/or activities to enhance cybersecurity posture of the IT operating environment</li><li>
Implement defined procedures for remediation, or make an informed decision to escalate</li></ul>
Qualifications:
<ul><li>Bachelor's with 8+ years of cyber threat analysis experience (or commensurate experience)</li><li><div>
The candidate should have at minimum ONE of the following certifications:</div><ul><li>
Certified Information System Security Professional (CISSP).</li><li>
SANS - GCIA Intrusion Analyst</li><li>
SANS - GREM Reverse Engineering Malware</li><li>
SANS - GISF Security Fundamentals SANS - GXPN Exploit Researcher and Advanced Penetration Tester</li><li>
SANS - GMON Continuous Monitoring Certification</li><li>
OSCP (Certified Professional)</li><li>
OSCE (Certified Expert)</li><li>
OSWP (Wireless Professional)</li><li>
OSEE (Exploitation Expert)</li><li>
CCSP Certified Cloud Security Professional</li><li>
LPT Licensed Penetration Tester</li><li>
ECSA EC-Council Certified Security Analyst</li></ul></li></ul><div><b><br>
Clearance Required:</b> Must be able to attain and maintain an AOUSC Public Trust</div>
Posted Salary Range: USD $108,310.00 - USD $160,000.00 /Yr.</div>

Cyber Threat Analyst

Schwarz Corporate Solutions

<p></p><div><div><div><div><ul><li><div><div><h2 class="jobSectionHeader"><b>Standort</b></h2>
<div><div>Stiftsbergstra&szlig;e 1
<br>
74172 Neckarsulm
</div></div></div></div></li><p></p><li><div><div><h2 class="jobSectionHeader"><b>Abteilung / Bereich</b></h2>
<div><div>IT - Security</div>
</div></div></div></li><p></p><li><div><div><h2 class="jobSectionHeader"><b>Einstiegslevel</b></h2>
<div><div>Berufserfahrene</div>
</div></div></div></li><p></p><li><div><div><h2 class="jobSectionHeader"><b>Arbeitsmodell</b></h2>
<div><div>Vollzeit</div>
</div></div></div></li><p></p><li><div><div><h2 class="jobSectionHeader"><b>Referenznummer</b></h2>
<div><div>3143</div>
</div></div></div></li></ul></div></div></div><div><div><div><p>Schwarz Digits schafft das technologische Fundament f&uuml;r digitale Entscheidungsfreiheit in Europa. Als IT- und Digitalsparte der Schwarz Gruppe entwickeln und verantworten wir einerseits die IT-Infrastrukturen f&uuml;r die Handelssparten Lidl und Kaufland sowie die Schwarz Produktion und PreZero. Gleichzeitig agieren wir als unabh&auml;ngiger Anbieter am externen Markt, um Unternehmen in ganz Europa bei ihrer digitalen Transformation zu unterst&uuml;tzen. Unsere Kernleistungen b&uuml;ndeln wir in den Bereichen Cloud, Cyber Security, Data &amp; AI, Communication und Workspace. Trage auch du zur digitalen Entscheidungsfreiheit in Europa bei.
<br>
<br>
Bei uns arbeitest du an der Schnittstelle zwischen Agilit&auml;t und Sicherheit: Du profitierst von den schnellen Entscheidungswegen, genie&szlig;t echte Gestaltungsspielr&auml;ume in deinen Projekten und baust dabei auf das stabile Fundament der Schwarz Gruppe.</p>
</div></div></div><div><div><h3 class="jobSectionHeader"><b>Deine Aufgaben</b></h3>
<div><div><ul><li>Du verifizierst Schwachstellen aus automatisierten Web Application Scans mit deinem tiefen Verst&auml;ndnis f&uuml;r Angriffsvektoren, identifizierst False Positives und optimierst kontinuierlich die Scan-Policies.</li>
<li>Du nutzt gezielt KI-gest&uuml;tzte Tools sowie Automatisierungsl&ouml;sungen, um Analyseprozesse zu beschleunigen und die Service-Qualit&auml;t stetig zu verbessern.</li>
<li>Du stellst sicher, dass moderne Schnittstellen wie REST, GraphQL und SOAP nicht nur oberfl&auml;chlich, sondern tiefgehend und automatisiert auf Schwachstellen gepr&uuml;ft werden.</li>
<li>Du gew&auml;hrleistest den stabilen Betrieb von Scans in hybriden Netzwerken (On-Prem &amp; Cloud) ohne Impact auf das Core Business und l&ouml;st technische H&uuml;rden bei Routing oder Firewalls souver&auml;n.</li>
<li>Du agierst als Wissens-Multiplikator und Mentor f&uuml;r deine Kollegen, dokumentierst Prozesse nachhaltig und unterst&uuml;tzt so den perspektivischen Ausbau des Teams.</li>
<li>Du bewertest bestehende Systeme sowie Abl&auml;ufe hinsichtlich ihrer Aktualit&auml;t und priorisierst deine Aufgaben im Team flexibel nach ihrer Wirkung und Relevanz f&uuml;r das Unternehmen.</li>
</ul></div></div></div><div><h3 class="jobSectionHeader"><b>Dein Profil</b></h3>
<div><div><ul><li>Du hast eine erfolgreich abgeschlossenes Studium mit Informatik Schwerpunkt und bringst mindesten 3 Jahre Berufserfahrung im Web Application Pentesting mit.</li>
<li>Du kommunizierst sicher auf Deutsch (B2-Level) und Englisch (B2/C1-Level).</li>
<li>Du &uuml;berzeugst mit tiefem Web-App Scanner &amp; API-Know-how, bist Power-User einschl&auml;giger DAST-Tools und verstehst genau, wie man komplexe Webanwendungen sowie APIs durchleuchtet &ndash; inklusive dem Setup von automatisierten Scans mit Logins/Credentials.</li>
<li>Du besitzt tiefgehendes Know-how in der automatisierten Absicherung moderner Schnittstellen (REST, GraphQL, SOAP) und deren tiefgreifender Pr&uuml;fung.</li>
<li>Du bringst idealerweise Programmier- und Script-Kenntnisse mit, um manuelle Routinen zu automatisieren und effiziente KI-Workflows zu entwickeln.</li>
<li>Du bringst ein grundlegendes Verst&auml;ndnis f&uuml;r (hybride) Infrastruktur, Cloud-Technologien oder Kubernetes mit, um Scanner-Anbindungen und Troubleshooting eigenst&auml;ndig im Team zu l&ouml;sen.</li>
<li>Du zeichnest dich durch eine proaktive, serviceorientierte Arbeitsweise aus und hast den Anspruch, dich sowie den Service im Team kontinuierlich weiterzuentwickeln.</li></ul></div></div></div></div></div>
<br><div><h2 class="jobSectionHeader"><b>Dein Ansprechpartner</b></h2>
<div><div><h3 class="jobSectionHeader"><b>Diana Wei&szlig;</b></h3>
<p>Recruiterin</p>
<ul><li>E-Mail:recruiting@mail.schwarz</li></ul></div></div></div>

Application Security Engineer (m/w/d)

<p></p><div><div><div><div><ul><li><div><div><h2 class="jobSectionHeader"><b>Standort</b></h2>
<div><div>Stiftsbergstra&szlig;e 1
<br>
74172 Neckarsulm
</div></div></div></div></li><p></p><li><div><div><h2 class="jobSectionHeader"><b>Abteilung / Bereich</b></h2>
<div><div>IT - Security</div>
</div></div></div></li><p></p><li><div><div><h2 class="jobSectionHeader"><b>Einstiegslevel</b></h2>
<div><div>Berufserfahrene</div>
</div></div></div></li><p></p><li><div><div><h2 class="jobSectionHeader"><b>Arbeitsmodell</b></h2>
<div><div>Vollzeit</div>
</div></div></div></li><p></p><li><div><div><h2 class="jobSectionHeader"><b>Referenznummer</b></h2>
<div><div>963</div>
</div></div></div></li></ul></div></div></div><div><div><div><p>Schwarz Digits schafft das technologische Fundament f&uuml;r digitale Entscheidungsfreiheit in Europa. Als IT- und Digitalsparte der Schwarz Gruppe entwickeln und verantworten wir einerseits die IT-Infrastrukturen f&uuml;r die Handelssparten Lidl und Kaufland sowie die Schwarz Produktion und PreZero. Gleichzeitig agieren wir als unabh&auml;ngiger Anbieter am externen Markt, um Unternehmen in ganz Europa bei ihrer digitalen Transformation zu unterst&uuml;tzen. Unsere Kernleistungen b&uuml;ndeln wir in den Bereichen Cloud, Cyber Security, Data &amp; AI, Communication und Workspace. Trage auch du zur digitalen Entscheidungsfreiheit in Europa bei.
<br>
<br>
Bei uns arbeitest du an der Schnittstelle zwischen Agilit&auml;t und Sicherheit: Du profitierst von den schnellen Entscheidungswegen, genie&szlig;t echte Gestaltungsspielr&auml;ume in deinen Projekten und baust dabei auf das stabile Fundament der Schwarz Gruppe.</p>
</div></div></div><div><div><h3 class="jobSectionHeader"><b>Deine Aufgaben</b></h3>
<div><div><ul><li>Du planst und f&uuml;hrst Red Team- und Purple Team-Eins&auml;tze innerhalb der gesamten Schwarz Gruppe aus und genie&szlig;t dabei viele Freiheiten in der Umsetzung und Auswahl der Angriffsziele</li>
<li>Du kennst aktuelle Bedrohungen, Schwachstellen und Exploits und kannst diese in Bezug auf ihr Risiko und Auswirkungen bewerten</li>
<li>Du deckst Schwachstellen beispielsweise in Programmen, Konfigurationen, Prozessen oder menschlichem Verhalten auf und entwickelst Techniken zu deren Ausnutzung</li>
<li>Du planst und f&uuml;hrst physische Angriffe aus, die von Lockpicking und verdecktem Zutritt &uuml;ber das Kopieren von Ausweisen bis hin zu Social Engineering reichen</li>
<li>Du erarbeitest dir Wissen &uuml;ber Advanced Threat Actors, deren Taktiken, Techniken und Verfahren (TTPs) und kannst diese in eigenen Angriffsszenarien einsetzen</li>
<li>Du entwickelst und betreibst eigene Tools, inklusive eigener Schadsoftware, die g&auml;ngige Sicherheits- und &Uuml;berwachungssysteme umgehen kann</li>
<li>Du arbeitest eng mit dem Blue Team zusammen und unterst&uuml;tzt es in der kontinuierlichen Verbesserung seiner Schutzmechanismen und Prozesse</li>
<li>Du planst und f&uuml;hrst Tabletop-Exercises sowie Capture-The-Flag Events durch</li>
</ul></div></div></div><div><h3 class="jobSectionHeader"><b>Dein Profil</b></h3>
<div><div><ul><li>Du hast Erfahrung in Cyber Security und im Speziellen in Offensive Security (Pentesting, Red Teaming, Ethical Hacking)</li>
<li>Du hast eine schnelle Auffassungsgabe und Verst&auml;ndnis von neuen Situationen, Tools und Technologien und kannst dieses schnell einsetzen</li>
<li>Dein Wissen umfasst ein weites Spektrum von Angriffsmethoden und -techniken, inklusive post-Exploitation und lateral Movement</li>
<li>Du hast bereits als Penetrationstester, Red-Team Operator oder als Security Researcher gearbeitet</li>
<li>Du kennst einschl&auml;gige Angriffs-Tools und bist mit Netzwerkprotokollen und Cloud Security vertraut</li>
<li>Du hast Erfahrung in der Entwicklung neuer Angriffstechniken und in dem Umgehen von typischen Sicherheitssystemen</li>
<li>Du beherrscht Skript- und Programmiersprachen wie Python, Powershell, Go, C#, C++ oder Rust, um eigene Tools zu entwickeln</li>
<li>Du hast den Drang, Schwachstellen zu finden und mit den Kollegen in den Austausch zu gehen, um diese zu schlie&szlig;en</li>
<li>Du zeichnest dich durch hohe analytische, kommunikative und kreative F&auml;higkeiten aus, arbeitest gerne eigenverantwortlich, im Team und denkst wie ein Angreifer</li>
<li>Du bist im Bereich der Offensive Security zertifiziert (OSCP, OSEP, OSED/E, CRTO, CRTE,..)</li>
<li>Du trittst &uuml;berzeugend und sicher auf und kommunizierst dabei in Deutsch und Englisch</li></ul></div></div></div></div></div>
<br><div><h2 class="jobSectionHeader"><b>Dein Ansprechpartner</b></h2>
<div><div><h3 class="jobSectionHeader"><b>Diana Wei&szlig;</b></h3>
<p>Recruiterin</p>
<ul><li>E-Mail:recruiting@mail.schwarz</li></ul></div></div></div>

Cyber Offensive Security Engineer / Red Team Engineer (m/w/d)

TAWANTECH

<div>Banking Integration Tester - (Temenos T24)<p><b>
Industry:</b> Banking<br>
<b>Employment Type: </b>Full-Time<br>
<b>Experience: </b>+4 Years
</p>Position Overview<p>
We are looking for a detail-oriented <b>Software Tester &ndash; Integration Domain</b> to join our Banking Technology team. The ideal candidate will have hands-on experience in <b>integration testing</b> across distributed systems, ensuring seamless communication between banking applications, middleware, APIs, and third-party services.</p><p>
This role requires a strong understanding of software testing methodologies, integration workflows, and banking environments to ensure high-quality and reliable system integrations.</p><p></p>
Key Responsibilities<ul><li>
Design, prepare, and execute Integration Test Cases and Test Scenarios.
</li><li>Validate end-to-end integration between banking applications, middleware, APIs, and external systems.
</li><li>Analyze Business and Functional Requirements to identify integration testing needs.
</li><li>Perform System Integration Testing (SIT), Regression Testing, Smoke Testing, and Functional Testing.
</li><li>Identify, document, track, and verify software defects using defect management tools.
</li><li>Collaborate closely with Business Analysts, Developers, Solution Architects, and Project Managers.
</li><li>Validate API requests and responses using testing tools.
</li><li>Verify data consistency across multiple integrated systems and databases.
</li><li>Participate in requirement reviews and provide feedback from a testing perspective.
</li><li>Support UAT activities whenever required.
</li>Ensure testing activities comply with banking quality standards and project timelines.<br>
<li>
</li></ul><br>
<br>
<b>Requirements</b><p></p><p><br>
</p><ul><li>Bachelor's degree in Computer Science, Information Systems, Engineering, or a related field.
</li><li><b>+ 4 years of experience</b> in Software Testing with a strong focus on <b>Integration Testing</b>.
</li><li>Previous experience working within the <b>Banking</b> or <b>Financial Services</b> sector is highly preferred.
</li><li><b>Hands-on experience with Temenos T24 testing and integration is highly preferred.</b>
</li><li>Solid understanding of the Software Testing Life Cycle (STLC) and Software Development Life Cycle (SDLC).
</li><li>Hands-on experience with API testing using <b>Postman</b>, <b>SoapUI</b>, or similar tools.
</li><li>Good knowledge of SQL for database validation.
</li><li>Experience with defect tracking tools such as <b>JIRA</b>, <b>Azure DevOps</b>, or equivalent.
</li><li>Strong analytical and troubleshooting skills.
</li><li>Excellent communication and documentation skills.</li></ul></div>

Banking Integration Tester - (Temenos T24)

Speak Easy Marketing PVT LTD

<p><b>We're Hiring: Cyber Security Expert</b></p><p><b>Location:</b> Lahore<br/><b>Company:</b> Dunya TV (National Communication Services (SMC-Pvt.) Ltd.)<br/><b>Department:</b> Information Technology (IT)</p><p>Are you passionate about protecting enterprise systems from cyber threats? Dunya TV is looking for a highly skilled <b>Cyber Security Expert</b> to strengthen our security posture, safeguard critical infrastructure, and ensure the confidentiality, integrity, and availability of our digital assets.</p><p>Key Responsibilities</p><ul><li>Design, implement, and maintain enterprise cybersecurity policies and controls.</li><li>Monitor networks, servers, and endpoints for security incidents and vulnerabilities.</li><li>Conduct vulnerability assessments and penetration testing.</li><li>Investigate and respond to cybersecurity incidents, malware infections, and data breaches.</li><li>Configure and manage firewalls, IDS/IPS, VPNs, endpoint protection, and email security solutions.</li><li>Perform security audits, risk assessments, and compliance reviews.</li><li>Ensure timely installation of security patches and system updates.</li><li>Develop and maintain incident response and disaster recovery procedures.</li><li>Conduct cybersecurity awareness training for employees.</li><li>Maintain security documentation, reports, and compliance records.</li><li>Collaborate with IT infrastructure and application teams to implement secure solutions.</li></ul><p>Requirements</p><ul><li>Bachelor's degree in Computer Science, Information Security, Cyber Security, or a related field.</li><li><b>3&ndash;5 years</b> of hands-on experience in cybersecurity or information security.</li><li>Strong knowledge of network security, Windows/Linux administration, Active Directory, cloud security, and endpoint protection.</li><li>Experience with SIEM solutions, vulnerability scanners, EDR/XDR, and security monitoring tools.</li><li>Knowledge of ISO 27001, NIST Cybersecurity Framework, CIS Controls, or similar security standards.</li><li>Familiarity with ethical hacking methodologies and penetration testing tools is preferred.</li><li>Strong analytical, troubleshooting, and incident response skills.</li><li>Excellent communication and documentation skills.</li></ul><p>Preferred Certifications</p><ul><li>CEH (Certified Ethical Hacker)</li><li>CompTIA Security+</li><li>CISSP</li><li>CISM</li><li>ISO 27001 Lead Implementer/Lead Auditor</li><li>Microsoft Security Certifications</li><li>Cisco CyberOps or CCNP Security (preferred)</li></ul><p>Work Location: In person</p>

Cyber Security Expert

Search 43+ Penetration tester jobs near you this August. New roles added regularly across leading industries. Apply today.