Peneteration Tester

Pluto IT Solutions is seeking a skilled Penetration Tester with five years of experience in cybersecurity, specializing in identifying and mitigating vulnerabilities within diverse IT environments. The ideal candidate holds a current and verifiable OSCP certification, demonstrating advanced expertise in penetration testing methodologies and tools. This role emphasizes hands-on experience with web applications, APIs, networks, Active Directory, and cloud platforms, ensuring a comprehensive approach to security assessments. Strong report-writing and communication skills in English are essential to articulate findings clearly and effectively. The Penetration Tester operates independently, without team management responsibilities, focusing on conducting thorough vulnerability assessments, threat modeling, and penetration tests using industry-standard tools such as Burp Suite Professional, Nmap, Metasploit, Nessus, Nuclei, Wireshark, and Kali Linux. The successful candidate collaborates closely with internal teams to improve security posture by providing detailed, actionable recommendations based on extensive testing and analysis.
Responsibilities

Conduct thorough penetration tests on web applications, APIs, networks, Active Directory structures, and cloud environments to identify security weaknesses and vulnerabilities.
Perform vulnerability assessments and threat modeling to evaluate system risks and prioritize remediation efforts effectively.
Utilize industry-standard penetration testing tools including Burp Suite Professional, Nmap, Metasploit, Nessus, Nuclei, Wireshark, and Kali Linux to simulate real-world attacks and identify potential threats.
Analyze security findings to create clear, concise, and detailed technical reports highlighting vulnerabilities, risk levels, and recommended mitigation strategies.
Collaborate with IT and development teams to communicate security issues and support the implementation of security best practices and remediation plans.
Maintain up-to-date knowledge of the latest cybersecurity threats, vulnerabilities, and attack vectors to ensure testing approaches remain current and effective.
Ensure compliance with company policies and industry standards related to information security and penetration testing procedures.
Support the continuous improvement of penetration testing methodologies and tools through feedback and adaptation to emerging technologies and threats.
Prepare for and participate in practical technical assessments as part of the candidate selection process or ongoing professional development.
Manage multiple testing assignments efficiently, adhering to project deadlines without managing a team.