Penetration Tester

Responsibilities

• Perform intelligence-led security assessments on Internet-facing web applications and internal/external software services, including REST/SOAP/GraphQL APIs.
• Conduct penetration tests across public and private network infrastructure assets.
• Execute code-aware penetration testing and security assessments for iOS and Android mobile applications.
• Assess wireless networks, OT assets, and cloud environments (AWS, Azure, GCP) using automated tools and custom scripts.
• Perform internal and external adversary emulations and segmentation testing.
• Develop testing scripts, procedures, and methodology documents for complex enterprise applications.
• Compile detailed executive and technical reports, documenting exploit chains and proof-of-concept scenarios.

Requirements

• 1-4 years of relevant experience in security assessments or penetration testing.
• Proficiency in manual and automated security assessments using open-source and commercial tools.
• Deep knowledge of common software vulnerabilities, including OWASP Top 10 and CWE/SANS Top 25.
• Hands-on experience with Kali Linux, Metasploit, Nmap, Burp Suite, and other industry-standard tools.
• Programming skills in Python, PHP, Perl, Ruby, or other interpreted/compiled languages.
• Excellent English communication skills, with the ability to present complex technical topics clearly.
• Willingness to travel extensively for domestic and international assignments.
• Ability to work methodically and independently in a dynamic, international team environment.

Preferred Qualifications

• Relevant security certifications such as OSCP, OSWE, OSEP, OSCE, or CRTP.
• Experience with reverse engineering and exploit development.
• Experience testing mobile applications or industrial control systems.

About the Company

NetSentries Technologies is an Enterprise Cyber Security Assessor serving Global Banks and Forbes 2000 companies across four continents. We serve our customers by continuously identifying Cyber Risks and enabling Blue teams with Threat Informed Defensive capabilities to protect their organizations better.