Penetration Tester

Responsibilities

• Perform intelligence-led security assessments on web applications, network infrastructure, and mobile applications (iOS/Android).
• Conduct security assessments on cloud environments (AWS/Azure/GCP) using automated tools and custom scripts.
• Execute internal and external adversary emulations and Active Directory red teaming.
• Perform assessments of wireless networks, OT assets, and API layers (REST/SOAP/GraphQL).
• Develop testing scripts, procedures, and penetration testing strategies for complex enterprise applications.
• Compile detailed executive and technical reports, documenting exploit chains and proof-of-concept scenarios.
• Develop methodology documents and pre-engagement questionnaires for various security projects.

Requirements

• 3-6 years of relevant experience in penetration testing or offensive security.
• Proficiency in conducting at least two types of assessments (e.g., Web, Network, Mobile, Cloud, or OT).
• Deep knowledge of common software vulnerabilities, including OWASP Top 10 and CWE/SANS Top 25.
• Hands-on experience with tools such as Kali Linux, Metasploit, Nmap, Burp Suite, Nexpose, and Nessus.
• Programming skills in Python, PHP, Perl, Ruby, or other interpreted/compiled languages.
• Excellent English communication skills, with the ability to present complex technical topics clearly.
• Willingness to travel extensively for domestic and international client engagements.
• Ability to work methodically and independently in a fast-paced, dynamic environment.

Preferred Qualifications

• Relevant security certifications such as OSCP, OSWE, OSEP, OSCE, or CRTP.
• Experience with reverse engineering and exploit development.
• Experience in mobile application or industrial control systems (ICS) security.

About the Company

NetSentries is an Enterprise Cyber Security Assessor serving Global Banks and Forbes 2000 companies across four continents. We help organizations identify cyber risks and enable Blue teams with threat-informed defensive capabilities to protect their infrastructure.