Penetration tester in cybersecurity

HackEthic is a specialized team of information security and cybersecurity professionals delivering offensive and defensive services to a diverse portfolio of clients. From fast-moving startups to privately held enterprises and publicly traded financial institutions, we help organizations design and implement robust ISMS frameworks, conduct comprehensive awareness programs, and execute high-impact penetration testing and red teaming exercises.

• Conduct penetration tests across web & mobile applications, APIs, cloud environments, internal/external network infrastructure, and modern AI/LLM-integrated architectures.
• Perform manual exploitation, payload crafting, and complex attack chaining to uncover critical vulnerabilities that automation misses.
• Collaborate directly with engineering and security teams to translate raw findings into prioritized, actionable remediation roadmaps.
• Deliver structured, high-impact assessment reports detailing attack vectors, business impact, and mitigation steps.
• Keep our methodologies ahead of the curve by researching emerging attack surfaces, zero-days, and modern evasion techniques.

• Minimum 4 years in cybersecurity roles, including at least 2 years of dedicated, hands-on penetration testing experience.
• Strong technical understanding of network protocols, operating system internals, mobile architectures (iOS/Android), and modern web stacks.
• Proven expertise with industry-standard penetration testing tools and frameworks.
• Practical experience leveraging modern AI-assisted tools for code analysis, recon, or scripting, while respecting client confidentiality and data security.
• Professional proficiency in both Georgian and English (written and spoken), with the proven ability to present complex technical findings clearly to both engineering leads and non-technical executives.
• Bachelor’s degree in Cybersecurity, Computer Science, IT, or equivalent practical experience.
• Будет плюсом: Hands-on certifications (e.g. OSCP, OSWE, OSCE, GXPN, GPEN, CRTO, CRTP, CMWAPT) are strongly preferred; Experience in security research; Experience with Common Vulnerabilities and Exposures (CVEs) and bug bounty programs; Experience working in a consulting environment, serving a diverse client base across multiple industries

• Competitive remuneration
• Flexible working mode
• Budget for professional and personal development
• Opportunity to test sophisticated architectures without repetitive checklist auditing