About the job
The Role
The Penetration Tester III will play a pivotal role in planning, executing, and documenting detailed penetration tests across various networks, infrastructures, and web applications. This position demands a thorough understanding of identifying, exploiting, and validating vulnerabilities to evaluate the organization's security framework. Candidates will apply industry-standard methodologies and threat intelligence to simulate the tactics, techniques, and procedures of real-world threat actors. This role also requires collaboration with cybersecurity teams to elevate detection capabilities, fortify defenses, and facilitate automation initiatives. Exceptional technical communication skills and the ability to engage with both technical and non-technical stakeholders are essential, along with hands-on experience with advanced exploitation tools.
Key Responsibilities:
• Strategize and execute penetration tests on networks, systems, and enterprise infrastructures.
• Conduct web application penetration tests in accordance with OWASP Top 10 vulnerabilities.
• Implement exploitation methods such as phishing, social engineering, buffer overflows, fuzzing, covert channels, and data exfiltration.
• Utilize threat intelligence to replicate known adversarial tactics and techniques.
• Employ tools including BloodHound, Burp Suite, Cobalt Strike, Metasploit, and Mimikatz.
• Create automation scripts and tools to enhance penetration testing operations.
• Collaborate with cybersecurity teams to refine automation, detection, and defense strategies.
• Effectively communicate testing methodologies, outcomes, and recommendations to stakeholders.
• Contribute to the ongoing enhancement of red, blue, and purple team assessment processes.