Senior Penetration Tester (Mobile, API, Cloud)

What you'll do

• Lead penetration testing engagements across mobile applications, APIs, web platforms, and cloud environments.
• Perform manual security testing and exploitation to identify vulnerabilities and validate business impact.
• Assess infrastructure against industry standards including OWASP Top 10, API Security Top 10, and MASVS.
• Evaluate security controls within AWS, Azure, containerized environments, and Kubernetes platforms.
• Conduct threat modeling and risk assessments to prioritize testing activities and remediation efforts.
• Develop detailed security reports featuring vulnerability analysis, risk ratings, and actionable remediation recommendations.
• Create and enhance security testing tools, scripts, and automation to improve assessment coverage.
• Mentor junior testers and lead knowledge-sharing initiatives to strengthen enterprise security practices.

What we're looking for

• Bachelor's degree in Engineering or Science, or equivalent work experience.
• Eight or more years of experience in information security with expertise in offensive security and penetration testing.
• Two or more years of experience in IT infrastructure management, application architecture, risk management, data architecture, middleware technology, IT operations, and project management.
• Five or more years of hands-on mobile application security testing for Android and iOS platforms.
• Expert proficiency with Burp Suite Pro, Postman, Insomnia, Nmap, Metasploit, Kali Linux, and other security tools.
• Strong scripting and automation skills using Python, PowerShell, Bash, Ruby, or Go.
• Experience assessing security within AWS, Azure, Kubernetes, containers, and cloud-native platforms.
• Knowledge of AI and Machine Learning security risks, including prompt injection and insecure model access.