Penetration Tester

Shou; Dubai; On-site; AED 60,000 - 100,000; Full time

Job summary

An established industry player is seeking a skilled penetration tester to enhance its security posture. In this role, you will conduct comprehensive assessments of web applications, employing advanced techniques to uncover vulnerabilities. Your expertise will guide development teams in implementing effective remediation strategies, ensuring the security of critical systems. This position offers a unique opportunity to work in a dynamic environment where your contributions will directly impact the organization’s security framework. If you are passionate about cybersecurity and thrive in challenging scenarios, this role is perfect for you.

Qualifications

• Minimum of two years of experience in web penetration testing.
• Expertise in web application vulnerabilities and manual testing.

Responsibilities

• Conduct thorough penetration testing on web applications.
• Develop effective remediation strategies for vulnerabilities.

Skills

Web Penetration Testing

OWASP Standards

Manual Testing Methodologies

Cloud Security (AWS, Azure)

Bug Bounty Programs

Education

Degree in Cybersecurity or related field

Certifications (BSCP, OSWE, OSWA)

Job description

• Conduct thorough penetration testing across a variety of web applications, examining both client-side and server-side aspects. This includes an in-depth analysis of application structures, server setups, databases, and identifying business and logic flaws to detect security vulnerabilities.
• Employ sophisticated techniques and adopt an adversary's mindset to uncover and exploit vulnerabilities, highlighting the potential impact to emphasize the need and urgency for remediation. This includes the development of custom payloads and leveraging known exploits.
• Develop and communicate effective remediation strategies for mitigating identified vulnerabilities, ensuring clear guidance is provided to the development teams involved.

Requirements:

• A minimum of two years of experience in the field of web penetration testing.

Qualifications and Certifications:

• Degree or industry-recognized certifications focused on practical skills, such as BSCP, OSWE, OSWA, HTB-CWEE, or HTB-CBBH, serve as substantial evidence of practical knowledge and expertise in penetration testing, demonstrating a commitment to and proficiency in the field.
• Expertise in Web Pentesting: Comprehensive knowledge of web application vulnerabilities, to exploit security gaps/vulnerabilities on endpoint applications. A solid understanding of OWASP/OSWAP API standards and proficiency in manual testing methodologies is a must.
• Bug Bounty Recognition: Achievements in bug bounty programs, indicating practical experience in identifying and reporting security vulnerabilities, are considered an advantage.
• Cloud and Container Security: Experience with security assessments of cloud-based applications and services (e.g., AWS, Azure) and familiarity with the security considerations for containerized deployments are desirable.