Do you have experience in performing penetration testing? Do you like to test complex applications and find ways around security controls? Do you have proven ability to report and to provide guidance for software teams to remediate vulnerabilities?

We’re looking for a penetration tester:

•perform manual penetration testing against web, thick-client and mobile applications and manual penetration testing against critical infrastructure (e.g. Active Directory, LDAP)
•identify and report vulnerabilities using common methodologies and have extensive knowledge of OWASP
•communicate with application teams on how to remediate certain vulnerabilities
•have knowledge of a variety of technologies and tools, such as Burp Suite, DAST, Azure cloud,
•participate in process improvements and automation
•perform technical QAs, including false-positive analysis and risk rating reviews