Senior Penetration Tester

Job Description

Senior Penetration Tester

PlutoSec is a leading cybersecurity and penetration testing company delivering manual security assessments for organizations across the United States and Canada. We are looking for an experienced Penetration Tester to join our growing offensive security team.

Responsibilities

• Perform Web Application Penetration Testing
• Conduct API Security Assessments
• Mobile Application Security Testing (iOS & Android)
• Internal & External Network Penetration Testing
• Active Directory Security Assessments
• Cloud Security Assessments (Azure, AWS & GCP)
• Validate vulnerabilities manually using industry-leading tools
• Prepare professional technical and executive reports
• Work directly with clients during remediation and retesting

Requirements

• 3+ years of penetration testing experience
• Strong knowledge of OWASP Top 10 & API Security Top 10
• Experience with Burp Suite Professional, Nmap, Metasploit, Wireshark, Nessus, Invicti or Acunetix
• Experience with Active Directory, Windows & Linux
• Knowledge of Azure, AWS or Google Cloud
• Strong reporting and communication skills
• Relevant certifications such as OSCP, PNPT, CEH, CRTO, GPEN or equivalent are an asset

Preferred Skills

• Red Team Operations
• Web Application Security
• API Security Testing
• Cloud Security
• Malware Analysis
• Digital Forensics
• Source Code Review
• DevSecOps

Why Join PlutoSec?

• Work on enterprise penetration testing engagements
• Collaborative cybersecurity team
• Career growth and continuous learning
• Flexible work environment
• Exposure to modern attack techniques and security technologies