Penetration Tester (Ethical Hacker)

- Conduct comprehensive black-box, white-box, and gray-box penetration testing on web applications, networks, APIs, and mobile applications - Identify and exploit security flaws, misconfigurations, and vulnerabilities - Simulate authentic cyber threats and attack scenarios utilizing red team tactics - Perform security evaluations in cloud environments such as AWS, Azure, and Google Cloud - Research and test zero-day vulnerabilities, malware, and exploit methods - Develop tailored exploits, scripts, and tools for penetration testing activities - Reverse-engineer applications and evaluate binary security issues - Utilize various frameworks including Metasploit, Burp Suite, Nmap, Kali Linux, and Cobalt Strike - Document results, risk levels, and recommendations for remediation in penetration testing reports - Ensure adherence to security frameworks like OWASP, NIST, ISO 27001, PCI-DSS, and SOC 2 - Present testing outcomes to security teams, developers, and executive leadership - Collaborate with blue teams and security engineers to implement solutions and enhance security protocols - Perform threat modeling, attack surface analysis, and security code reviews - Stay up-to-date on new threats, hacking strategies, and advancements in security research - Assist in security awareness training and red team exercises