Penetration tester in application security

Digitain now welcomes highly skilled and detail-oriented Penetration Tester to join our team. The ideal candidate will play a crucial role in assessing the security of our clients' software applications by analyzing source code and identifying potential vulnerabilities and weaknesses. You will collaborate with development teams, provide actionable recommendations for secure coding practices, and contribute to the overall improvement of software security. This role requires exceptional coding skills, a deep understanding of application security principles, and the ability to provide comprehensive code analysis

• Conduct comprehensive penetration testing on various systems, applications, and networks to identify vulnerabilities, weaknesses, and potential security risks
• Execute manual and automated testing methodologies to identify security flaws in networks, web applications, mobile applications, and infrastructure components
• Perform analysis and validation of security findings, and provide detailed reports outlining the identified vulnerabilities and potential impact to stakeholders
• Collaborate with development teams, system administrators, and other stakeholders to provide remediation recommendations and follow up on the implementation of necessary security controls
• Stay up to date with the latest security threats, vulnerabilities, and attack techniques, and incorporate this knowledge into penetration testing methodologies
• Contribute to the improvement of existing penetration testing frameworks, tools, and processes to enhance efficiency and effectiveness
• Assist in the development and maintenance of security policies, procedures, and guidelines
• Participate in incident response activities, including investigation and remediation of security incidents
• Provide guidance and mentorship to junior members of the team, assisting in their skill development and knowledge enhancement

• At least 2 years of experience in penetration testing or QA
• Bachelor's degree in Computer Science, Information Security, or a related field
• Proven experience in conducting penetration testing and vulnerability assessments in a professional setting
• In-depth knowledge of network protocols, web application architecture, operating systems, and common security vulnerabilities
• Proficiency in using a variety of penetration testing tools, frameworks, and methodologies
• Strong understanding of common security standards, such as OWASP, NIST, and ISO 27001
• Familiarity with regulatory compliance requirements, such as GDPR, HIPAA, or PCI DSS
• Excellent problem-solving and analytical skills, with the ability to think creatively and out-of-the-box
• Strong written and verbal communication skills, with the ability to clearly articulate technical concepts to both technical and non-technical stakeholders
• Ability to work effectively both independently and collaboratively in a fast-paced and dynamic environment
• High ethical standards, integrity, and a commitment to maintaining confidentiality

• Условий в вакансии нет