Pentester

In this role, you will conduct full-scope penetration tests on applications, APIs, internal infrastructure, networks, and cloud environments (AWS, Azure, GCP). You will identify and exploit security flaws, including insecure authentication, authorization bypass, input validation issues, cloud misconfigurations, and Active Directory misuse. You'll perform internal and external network testing, AD enumeration, and privilege escalation while automating security testing where possible by integrating Infrastructure as Code (IaC) and ServiceNow workflows. Simulating real-world attacks using the same techniques and tools as malicious actors will be part of your daily tasks. Additionally, you'll produce detailed, actionable reports with executive summaries and technical findings, collaborating with development, cloud, and infrastructure teams on remediation efforts. Staying up to date with the latest vulnerabilities, exploit techniques, and pentesting tools is also expected.