Role description
Pentester
GM SectecSummary: The Pentester is responsible for penetration testing (pen testing) activities to identify and exploit vulnerabilities in computer systems and networks. They will also be responsible for documenting their findings and reporting them to the organization's security team.
Essential Task:
- Perform penetration testing activities, such as identifying vulnerabilities, exploiting them, and documenting findings
- Stay up-to-date on the latest security threats and vulnerabilities
- Research and develop new pen testing techniques
- Work with other members of the security team to improve the organization's security posture
- Maintain a professional demeanor and attitude
- Plan and create penetration methods, scripts, and tests.
- Carry out remote testing of a client's network or onsite testing of their infrastructure to expose weaknesses in security.
- Simulate security breaches to test a system's relative security.
- Create reports and recommendations from your findings, including the security issues uncovered and level of risk.
- Advise on methods to fix or lower security risks to systems.
- Present your findings, risks and conclusions to management and other relevant parties.
- Consider the impact your 'attack' will have on the business and its users.
- Understand how the flaws that you identify could affect a business, or business function, if they're not fixed.
Minimum Requirements:
- Bachelor's degree in cybersecurity, information technology, or a related field
- 3+ years of experience in penetration testing
- Strong understanding of cybersecurity principles and concepts
- Experience with a variety of security tools and technologies
- Excellent problem-solving and analytical skills
- Strong written and verbal communication skills
- Ability to work independently and as part of a team
- Ability to work under pressure and meet deadlines
- Security certifications such as OSCP, GPEN, or eCPPT
- Knowledge in computer networks and associated protocols minimum 3 years.
- Knowledge in cybersecurity technologies minimum 3 years.