Manual Penetration Tester

Manual Penetration Tester

Experienced Manual Penetration Tester to conduct in-depth security assessments and drive remediation across our application portfolio. This role focuses on hands-on testing across multiple platforms and close collaboration with development teams to remediate vulnerabilities.

Responsibilities:

• Perform advanced manual penetration testing of web applications, APIs, thick clients, mobile applications (iOS/Android), etc.
• Identify, validate, and exploit security vulnerabilities; provide clear risk assessments and actionable remediation guidance.
• Collaborate closely with application and engineering teams to explain findings, coordinate fixes, and track remediation efforts.
• Retest remediated vulnerabilities to confirm effective resolution and prevent regressions.
• Produce high-quality technical reports suitable for developers, architects, and security stakeholders.

Requirements:

• Expert-level hands-on experience with penetration testing tools such as Burp Suite, HCL AppScan, Postman, SOAPUI, Echo Mirage, Android Studio, and tools in Kali Linux.
• Strong knowledge of application security vulnerabilities and attack techniques across web, API, mobile, and thick client environments (e.g., OWASP Top 10, API security risks).
• Proven ability to perform manual testing beyond automated scanning.
• Experience assessing applications deployed in Azure cloud environments, including understanding of Azure services and security controls.
• Strong automation experience; scripting skills in Python/bash are a plus.
• Excellent technical communication and collaboration skills.