We are looking for an experienced Senior Penetration Tester with strong expertise in offensive security, application security, and DevSecOps to identify complex vulnerabilities and strengthen our security posture.

Key Responsibilities

• Conduct advanced penetration testing of web applications, APIs, and authentication mechanisms.
• Identify and exploit complex vulnerabilities, including broken access control, business-logic flaws, SSRF, SQLi, XSS, and privilege escalation.
• Perform advanced reconnaissance, attack surface monitoring, and vulnerability chaining.
• Conduct manual secure code reviews.
• Integrate and optimize security scanning tools (SAST, DAST, SCA, secret detection, IaC, and container scanning) within GitLab CI/CD.
• Manage application security tools, including Semgrep, SonarQube, and OWASP Dependency-Track.
• Validate vulnerabilities, develop proof-of-concepts, and provide actionable remediation recommendations.

Required Qualifications

• Strong hands-on experience in web application and API penetration testing.
• Deep understanding of OWASP Top 10, OWASP API Security Top 10, and OWASP WSTG.
• Experience assessing OAuth2, OIDC, SAML, JWT, SSO, and session security.
• Proficiency in source-code security reviews and vulnerability exploitation.
• Familiarity with DevSecOps practices, CI/CD security, and security automation.
• Strong analytical, reporting, and communication skills.