Penetration Tester

Job Summary: The Penetration Testing Specialist / Information Security Analyst Journeyman is responsible for conducting thorough penetration tests and vulnerability assessments to identify and exploit security weaknesses. This role involves hands-on testing, validating findings, documenting results, and supporting retesting efforts to enhance organizational security posture.

Responsibilities: - Execute network scanning to identify vulnerabilities.

• Conduct web application penetration testing.
• Perform vulnerability exploitation to validate security gaps.
• Validate and document findings from penetration tests.
• Support data exfiltration testing to assess data leakage risks.
• Create detailed technical documentation and capture evidence such as screenshots.
• Assist in retesting activities to verify remediation effectiveness.

Required Skills & Certifications: - Bachelor's Degree or equivalent experience.

• Minimum of 3 years penetration testing experience.
• Proficiency with security assessment tools including Nessus, Burp Suite, Metasploit, Nmap, Wireshark, Kali Linux.
• Familiarity with OWASP Testing Framework.

Preferred Skills & Certifications: - Security+ certification.

• CEH (Certified Ethical Hacker) certification.
• PNP (Penetration Testing Professional) certification.
• TeJPT (Test of Java Penetration Testing) certification.
• GPEN (GIAC Penetration Tester) certification.

Special Considerations: - May require handling sensitive and confidential information securely.

• Must follow strict protocols for evidence capture and documentation.

Scheduling: - Standard work schedule with potential for on-call or flexible hours depending on testing requirements.