Penetration Tester/Security Engineer

Responsibilities

• Perform automated and manual penetration testing across web, mobile, cloud, and on-premises infrastructures
• Identify security weaknesses and propose mitigation strategies or secure architectural improvements
• Contribute to the continuous improvement of secure software development practices and promote security throughout the SDLC
• Analyze customer security requirements and recommend appropriate technical solutions
• Prepare clear and concise technical reports detailing findings and recommendations
• Collaborate with developers and security engineers to improve the overall security posture of applications

Requirements

• Minimum 2 years of experience in penetration testing or application security
• Experience with internal penetration tests or Red Team exercises
• Proficiency with tools including Burp Suite Professional, Nmap, Metasploit, Nessus, and Kali Linux
• Strong knowledge of OWASP Top 10, MITRE ATT&CK, and OSI/TCP networking
• Understanding of DevSecOps, Secure SDLC, and cloud security principles (AWS/Azure)
• Programming or scripting skills in Java, C/C++, PHP, or Python
• Fluency in English (written and spoken)

Preferred Qualifications

• Master's degree in Computer Science, Information Security, or a related field
• Experience with bug bounty platforms such as HackerOne, Hack The Box, or TryHackMe
• Relevant security certifications such as OSCP, OSWE, eCPPTv2, CHFI, GIAC GPEN, or AWS/Azure security specialties
• Previous experience as a software developer

About the Company

ARHS Group, part of Accenture, specializes in the management of complex public sector IT projects. We provide expertise in systems integration, informatics, analytics, and security management, helping clients navigate digital transformation through advanced software development, data science, and cloud solutions.