penetration tester

Corporate Panorama

<p><b>Key Responsibilities</b></p><p><b>1. Penetration Testing &amp; Vulnerability Assessments</b></p><ul><li>Perform <b>comprehensive penetration tests</b> on <b>web applications, APIs, and mobile apps</b>, including authentication mechanisms, business logic, session management, and data security controls.</li><li>Execute <b>cloud penetration testing engagements</b> across AWS, Azure, and GCP environments, focusing on IAM misconfigurations, container security (Kubernetes, Docker), serverless functions, and storage services.</li><li>Conduct <b>firewall and perimeter security assessments</b>, including rule-set reviews, evasion techniques, port/protocol testing, and VPN security validation.</li><li>Simulate <b>real-world attack scenarios</b> (Red Team/Blue Team exercises) to assess detection and response capabilities.</li><li>Lead and design <b>threat modeling sessions</b> to proactively identify risks in new systems or architectures.</li></ul><p><b>2. Exploitation &amp; Advanced Techniques</b></p><ul><li>Develop and use <b>custom scripts, exploits, and tools</b> when off-the-shelf solutions are insufficient.</li><li>Perform <b>privilege escalation, lateral movement, and persistence testing</b> within controlled environments.</li><li>Exploit misconfigurations, insecure code, or weak controls to demonstrate potential business impact.</li><li>Research and simulate <b>emerging attack vectors</b> relevant to web, cloud, and network infrastructures.</li></ul><p><b>3. Reporting &amp; Stakeholder Communication</b></p><ul><li>Deliver <b>clear, actionable, and prioritized reports</b> highlighting vulnerabilities, risks, and business impact.</li><li>Translate complex technical findings into <b>business-friendly recommendations</b> for executives and non-technical stakeholders.</li><li>Collaborate with software developers, cloud engineers, and network/security administrators to validate vulnerabilities and advise on remediation.</li><li>Provide <b>post-assessment debriefs and knowledge-sharing sessions</b> with IT and security teams.</li></ul><p><b>4. Security Advisory &amp; Continuous Improvement</b></p><ul><li>Contribute expertise during <b>secure design reviews</b> of web applications, APIs, cloud deployments, and network architectures.</li><li>Advise teams on <b>hardening measures</b>, best practices, and compliance with security frameworks (OWASP ASVS, CIS Benchmarks, NIST, ISO 27001).</li><li>Develop <b>methodologies and playbooks</b> for web, cloud, and firewall penetration testing to standardize assessments across the organization.</li><li>Continuously research <b>new exploits, vulnerabilities, and security tools</b>, ensuring testing techniques remain cutting-edge.</li></ul><p>Job Type: Full-time</p><p>Work Location: In person</p>

Security Penetration Tester

DICETEK LLC

<div><p>Skills:</p><ul><li>
Penetration Testing</li><li>
Vulnerability Assessment
</li><li>VAPT, Source code review</li><li>
Comprehensive Security testing of inhouse development</li><li>
Web security</li><li>
Mobile Security</li><li>
Network Security</li></ul></div><p></p>

Cyber Security Engineer / Penetration Tester

YASH Technologies

<div></div><div><div><div><div><div>Date: Sep 9, 2025
</div></div></div></div><div><div><div><div>Job Requisition Id: 62594
</div></div></div></div><div><div><div><div>Location:
Bangalore, KA, IN Bangalore, KA, IN
</div></div></div></div><div></div><div><div><div><div><p>YASH Technologies is a leading technology integrator specializing in helping clients reimagine operating models, enhance competitiveness, optimize costs, foster exceptional stakeholder experiences, and drive business transformation.</p><br>
<p></p>
<p>At YASH, we&rsquo;re a cluster of the brightest stars working with cutting-edge technologies. Our purpose is anchored in a single truth &ndash; bringing real positive changes in an increasingly virtual world and it drives us beyond generational gaps and disruptions of the future.</p><br>
<p></p>
<p><b>We are looking forward to hire Penetration Testing - Web Professionals in the following areas :</b></p><br>
<p></p>
<div><b>
Job description:</b></div><br>
<div></div>
<div><b>
Experience required: </b>4-8 years.</div><br>
<div></div>
<div><b>
Requirements :</b></div>
<ul>
<li>4+ years&rsquo; experience in Penetration Testing &ndash; Web, Mobile, API &ndash; Good experience</li>
<li>OWASP security standards &ndash; Good experience</li>
<li>Assess the criticality based on CVSS score card- &ndash; Good experience</li>
<li>Report preparation&ndash; Good experience</li>
<li>Burp Suite tool experience&ndash; Good experience</li></ul><br>
<p></p>
<p>At YASH, you are empowered to create a career that will take you to where you want to go while working in an inclusive team environment. We leverage career-oriented skilling models and optimize our collective intelligence aided with technology for continuous learning, unlearning, and relearning at a rapid pace and scale.</p><br>
<p></p>
<p><b>Our Hyperlearning workplace is grounded upon four principles</b></p>
<ul><li>Flexible work arrangements, Free spirit, and emotional positivity</li>
<li>Agile self-determination, trust, transparency, and open collaboration</li>
<li>All Support needed for the realization of business goals,</li>
<li>Stable employment with a great atmosphere and ethical corporate culture</li></ul></div></div></div></div></div><p></p>

Sr. Test Engineer - Penetration Testing

TAT IT Technolgies

<div>
 <strong>
  We have an urgent requirement for Information Security Analyst for our client based at Abu Dhabi
  <br/>
  <br/>
 </strong>
 <strong>
  Key Responsibilities
  <br/>
  <br/>
 </strong>
 <strong>
  Penetration Testing and Red Teaming:
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Conduct comprehensive penetration testing and red teaming exercises on systems, networks, applications and mobile to identify vulnerabilities and potential entry points for attackers.
  </li>
  <li>
   Develop and execute custom tools and scripts to automate testing and exploitation processes.
  </li>
  <li>
   Analyze and report on findings, providing detailed explanations of vulnerabilities and recommended remediation steps.
  </li>
  <li>
   Simulate advanced persistent threats (APTs) to test the resilience of security controls and incident response capabilities.
  </li>
  <li>
   ASM: Continuously discover and catalog all assets, including hardware, software, and network components.
  </li>
  <li>
   ASM: Monitor the attack surface for changes and potential vulnerabilities, using automated tools and manual assessments.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Vulnerability Assessment
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Perform thorough vulnerability assessments to identify and prioritize security weaknesses.
  </li>
  <li>
   Utilize industry-standard tools such as Qualys, Nessus or Nexpose and methodologies to uncover vulnerabilities in various environments.
  </li>
  <li>
   Provide actionable recommendations for remediation and mitigation strategies.
  </li>
  <li>
   Patch management
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Threat Modeling And Risk Assessment
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Conduct threat modeling and risk assessments to identify potential attack vectors and vulnerabilities
  </li>
  <li>
   Develop and maintain a comprehensive understanding of our systems, networks, and applications to identify potential vulnerabilities
  </li>
  <li>
   Provide recommendations for remediation and mitigation strategies
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Incident Response And Crisis Management
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Participate in security incident response and crisis management efforts as needed
  </li>
  <li>
   Collaborate with incident response teams to contain and remediate security incidents
  </li>
  <li>
   Provide technical expertise and guidance during incident response efforts
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Security Research And Development
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Stay up-to-date with the latest security threats and trends, and adapt testing methodologies accordingly
  </li>
  <li>
   Develop and maintain a comprehensive knowledge of industry-leading security tools and technologies
  </li>
  <li>
   Participate in security research and development efforts to identify and develop new testing techniques and methodologies
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Collaboration And Communication
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Collaborate with development teams to implement security patches and fixes
  </li>
  <li>
   Provide technical guidance and support to development teams on security-related issues
  </li>
  <li>
   Communicate complex technical information to non-technical stakeholders in a clear and concise manner
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Reporting And Documentation
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Develop and maintain detailed reports on findings, including vulnerability assessments, penetration testing results, and recommendations for remediation
  </li>
  <li>
   Document testing methodologies, tools, and results in a clear and concise manner
  </li>
  <li>
   Maintain accurate and up-to-date records of testing activities and results
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Mandatory Requirements
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Bachelor's degree in Computer Science, Information Assurance, or a related field
  </li>
  <li>
   OSCP, CEH, or other relevant certifications
  </li>
  <li>
   5+ years of experience in penetration testing, vulnerability assessment, or a related field
  </li>
  <li>
   Strong understanding of networking protocols, operating systems, and applications
  </li>
  <li>
   Proficiency in programming languages such as Python, C++, or Java
  </li>
  <li>
   Experience with penetration testing frameworks and tools such as Nmap, Nessus, Burp Suite, or Metasploit
  </li>
  <li>
   Strong analytical and problem-solving skills
  </li>
  <li>
   Excellent communication and reporting skills
  </li>
  <li>
   Ability to work independently and as part of a team
  </li>
  <li>
   Strong attention to detail and ability to maintain accurate records
  </li>
  <li>
   Ability to work in a fast-paced environment with tight deadlines
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Preferred Additional Requirements
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Experience with cloud-based technologies and cloud security
  </li>
  <li>
   Familiarity with Agile development methodologies
  </li>
  <li>
   Strong understanding of compliance and regulatory requirements (e.g., GDPR, PCI-DSS)
  </li>
  <li>
   Experience with security orchestration, automation, and response (SOAR) tools
  </li>
  <li>
   Familiarity with threat intelligence and threat hunting
   <br/>
   <br/>
  </li>
 </ul>
 Skills: security,information,penetration testing,vulnerability
</div>


Information Security Analyst

Amdocs

<div><p><b>Job ID: </b>203800
<br>
<b>Required Travel </b>: Minimal
<br>
<b>Managerial - No
</b><br>
<b>Location: </b><b>India- Pune (Amdocs Site)
</b></p><div><div><div><h2 class="jobSectionHeader"><b>Who are we?
</b></h2></div><div><p>Every day, billions of transactions, calls and messages that hold the world&rsquo;s communications fabric together run on systems that Amdocs has helped to create.
</p><p>Because we work with some of the largest and most innovative companies on the planet, our work makes an impact. Over the past four decades, we have continually reinvented ourselves, and as we keep moving into exciting new areas such as media, gaming, IoT, 5G, cloud services and more, there are always opportunities for us to grow and develop. We will nurture your entrepreneurial instincts with open doors and promote your ability to seize the day. Our company is built of amazing people, a supportive atmosphere and a culture built on mutual support, respect and a &ldquo;feel good factor&rdquo; that can only happen in a workplace built by the kind of people that Amdocs employs.
</p><p>Make your career journey with us.
</p></div></div><div><div><h2 class="jobSectionHeader"><b>In one sentence
</b></h2></div><div><p>The Information Security Analyst will lead the efforts to secure the Amdocs ecosystem by guiding and monitoring the different IT/ Product/ Business teams to ensure organizational security, by designing a secure architecture of software products/ conducting risk and threat analysis/ analyzing and managing a secure solution in the domain of infrastructure/ application while responding to specific stakeholders&rsquo; questions.<br>
</p></div></div><p></p><div><div><h2 class="jobSectionHeader"><b>What will your job look like?
</b></h2></div><div><p>As an Information Security Analyst, candidate must focus on identifying and assessing vulnerabilities in software systems, Networks and mobile based application.
<br>
The major focus will be on Application Penetration testing followed by Network Penetration Testing and Mobile Security assessments.
<br>
Experience to work closely with Application Developers/architects to track the security defects to closure
<br>
The work involves Test Case Creation, Penetration Testing, Source code reviews, Report Creation &amp; presentation to stakeholders along with operation and construction of tools to assist in these tasks.
<br>
To actively contribute to the Vulnerability management efforts of the organization via developer query resolution on vulnerabilities and defect tracking to closure.
<br>
Well versed with OWASP &ndash; Top Ten and WASC Threat Classifications
<br>
Expertise in Vulnerability Assessment and Penetration Testing of Web Applications
<br>
Business&#8208;Logic based application testing
<br>
Penetration testing of Mobile applications and websites.
<br>
Exploitation of the issues found and presenting the impact occurred
<br>
Source Code Reviews - Well versed in Java Secure Code Review
<br>
Expertise in Automated Scanning using CheckMarx and Fortify
<br>
Well versed with OWASP Code Review concepts &amp; identifiers
<br>
Familiar with popular tools:
<br>
Application Proxy: Burp suite, Paros, OWASP ZAP, WireShark
<br>
Vulnerability Scanners: IBM AppScan, HP WebInspect, Nessus, NTO Spider
<br>
Exploit Toolkits: Metasploit, Exploit DB etc.
</p></div></div><div><div><h2 class="jobSectionHeader"><b>All you need is...
</b></h2></div><div><ul><li>Understanding of the nature and sources of security vulnerabilities, how to identify and exploit them
</li><li>Strong expertise in security technologies and significant experiences in information technology focusing on security related vulnerabilities
</li><li>Good to have programming experience in Java, shell scripting, Perl, or Python
</li><li>Sound Knowledge of TCP/IP protocol Stack, HTTP protocol, encoding standards, encryption technologies and development frameworks.
</li><li><b>Application Security Testing/Penetration Testing (Web based, Thick client, web services, Mobile) - Must
</b></li><li><b>Network Security Testing/Penetration Testing (Network, OS, Databases etc.)
</b></li><li><b>Static Code Analysis/ Secure Code Review - Must
</b></li><li>Security defect Tracking and working closely with Developers to fix the issue
</li><li>Bachelors or higher degree in Computer Science or equivalent experience
</li></ul></div></div><div><div><h2 class="jobSectionHeader"><b>Why you will love this job:
</b></h2></div><div><ul><li>You will be able to demonstrates an understanding of key business drivers and ensures strategic directions are followed and the organization succeeds
</li><li>You will be able to gathers relevant data, identifies trends and root causes, and draws logical conclusions to develop solutions
</li><li>You will have ability to assess details, systems and other factors as part of a single and comprehensive picture
</li><li>We are a dynamic, multi-cultural organization that constantly innovates and empowers our employees to grow. Our people our passionate, daring, and phenomenal teammates that stand by each other with a dedication to creating a diverse, inclusive workplace!
</li><li>We offer a wide range of stellar benefits including health, dental, vision, and life insurance as well as paid time off, sick time, and parental leave
 </li></ul></div></div></div><p><b>Amdocs is an equal opportunity employer. We welcome applicants from all backgrounds and are committed to fostering a diverse and inclusive workforce</b></p></div>

ibex

<div>
 To protect IBEX infrastructure from emerging threats and help organization in achieving its business objectives
 <br/>
 <br/>
 Description: This position acts as IS resource having strong concepts of web application assessments and penetration testings. This position will coordinate &amp; will help implementing IT Security Roadmap and security processes for the protection of IEBX Global assets.
 <br/>
 <br/>
 <strong>
  Responsibilities
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Conduct full scale security assessments and manual penetration testing of web, APIs, mobile applications.
  </li>
  <li>
   Participate in red team and automated pentest exercises internally or by third party.
  </li>
  <li>
   Active coordination for any third party penetration testing exercises.
  </li>
  <li>
   Using open source tools, scripts and techniques to enumerate and map publically exposed assets and vulnerability surface.
  </li>
  <li>
   Coordination with IT infrastructure &amp; development teams for remediation.
  </li>
  <li>
   Reviewing application design and flow to identify business logic flaws.
  </li>
  <li>
   Using various tools for vulnerablilty scanning of IT assets and dynamic/static application assessments.
  </li>
  <li>
   Support development teams for secure coding practices.
  </li>
  <li>
   Perform Cloud security review and prepare reports with gaps and remediation guidelines.
  </li>
  <li>
   Familiarly with Gen-AI applications security assessment.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Qualifications
  <br/>
  <br/>
 </strong>
 Education - Bachelors Degree in IT/CS/Software Eng./Telecom
 <br/>
 <br/>
 Experience - 3-5 years in IT Security field
 <br/>
 <br/>
 <strong>
  Skills And Abilities
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Must have a passion to work in the IT Security field
  </li>
  <li>
   Does have experience in
  </li>
  <li>
   Penetration testing
  </li>
  <li>
   Vulnerability Assessment
  </li>
  <li>
   Burp Pro and other pentest tools
  </li>
  <li>
   Source Code Analysis tools
  </li>
  <li>
   OWASP strong understanding
  </li>
  <li>
   Must have good presentation skills
  </li>
  <li>
   OSCP/OSWP/CEH (Practical) certification is required
   <br/>
   <br/>
  </li>
 </ul>
 Reporting Time - 03:00 PM-12:00 am (PKST)
</div>


IT Security Specialist, IT

AL-Adyat for Consultant

<p><b>Job Summary:</b><br/>We are seeking a highly skilled SOC Analyst with expertise in <b>penetration testing</b> or <b>threat hunting</b> to join our Security Operations Center. The ideal candidate will proactively detect, investigate, and respond to cyber threats, ensuring the organization's IT infrastructure is secure.</p><p><b>Key Responsibilities:</b></p><ul><li>Monitor and analyze security events from multiple sources including SIEM, firewalls, IDS/IPS, and endpoint security tools.</li><li>Conduct <b>threat hunting activities</b> to identify hidden or emerging threats within the network.</li><li>Perform <b>penetration testing</b> on internal systems, applications, and networks to identify vulnerabilities.</li><li>Investigate security incidents, perform root cause analysis, and provide remediation recommendations.</li><li>Collaborate with IT and security teams to implement security improvements.</li><li>Develop and maintain documentation on threats, incidents, and SOC procedures.</li><li>Stay updated on the latest cyber threats, attack techniques, and security tools.</li></ul><p><b>Required Skills &amp; Qualifications:</b></p><ul><li>Bachelor&rsquo;s degree in Computer Science, Information Security, or related field.</li><li>Proven experience in SOC operations, penetration testing, or threat hunting.</li><li>Strong knowledge of network protocols, security technologies, and cybersecurity frameworks.</li><li>Hands-on experience with SIEM tools (e.g., Splunk, QRadar, ArcSight).</li><li>Familiarity with scripting and automation (Python, PowerShell, etc.).</li><li>Relevant certifications (e.g., CEH, OSCP, GCIH, or equivalent) are highly desirable.</li><li>Excellent analytical, problem-solving, and communication skills.</li></ul><p>Job Type: Full-time</p><p>Pay: QAR12,000.00 - QAR15,000.00 per month</p><p>Application Question(s):</p><ul><li>Have Experience penetration testing or threat hunting? </li></ul><p>Experience:</p><ul><li>SOC Analyst / Threat Hunting Specialist: 4 years (Required)</li></ul><p>Language:</p><ul><li>Arabic  (Required)</li></ul>

SOC Analyst / Threat Hunting Specialist

Search 604+ Penetration tester jobs near you this September. New roles added regularly across leading industries. Apply today.

604 penetration tester jobs NEAR_ME

Security Penetration Tester

Cyber Security Engineer / Penetration Tester

Sr. Test Engineer - Penetration Testing

Information Security Analyst

Information Security Analyst

IT Security Specialist, IT

SOC Analyst / Threat Hunting Specialist