Penetration Tester

• Excellent technical understanding of various web & mobile applications, frameworks, database technologies, server technology, operating systems, services, and network infrastructure, according to the scoping requirements.
• Real cybersecurity experience in penetration testing of mobile and/or web applications, IT and network infrastructure, by safely utilizing the cyber attacker tools, tactics, and procedures.
• Conduct comprehensive penetration tests on external network systems, identifying vulnerabilities in internet-facing assets such as presentation websites, web applications, and other externally exposed infrastructure.
• Perform internal penetration tests to evaluate the security of our internal networks, identifying potential paths for lateral movement, privilege escalation, and access to sensitive information (Active Directory and others).
• Execute thorough penetration testing on mobile applications across different platforms (iOS, Android) to identify security weaknesses that could compromise user data or app functionality.
• Conduct penetration tests on applications using black box, gray box, and white box approaches to uncover vulnerabilities and provide actionable remediation strategies.
• Stay updated with the latest threats, vulnerabilities, and penetration testing methodologies and tools to enhance testing effectiveness and efficiency.
• Proficiency with penetration testing tools and frameworks (e.g. Burp Suite, Nessus, etc.).
• Excellent problem-solving skills and the ability to think like an attacker to identify potential security threats.
• Document findings, prepare detailed reports for penetration testing projects.
• Good understanding of TCP/IP networking concepts.
• Constant awareness of new security issues.

• Experience with programming languages (Python, Ruby, PHP, C#, .NET, etc.).
• Relevant certifications such as OSCP, CEH, or similar are highly desirable.

• Analytical, motivated, attention to details.
• Capable of solving complex issues.
• Self-driven, interested in reading technology articles and sharing his/her knowledge.
• Able to find the root cause of the cybersecurity issues, exploiting and document it.
• Good time management skills.
• Any Certification is a plus (e.g., OSCP, etc.).

• Being a part of the Cyber Smart Defence – Stefanini Group team, you will work with renowned experts in the cybersecurity field.
• Working within complex projects that are globally extended.
• Competitive salary.
• Professional development opportunities.
• Friendly and collaborative work environment.
• Successful career path.

Stefanini