Techno Vista Dynamics
Location: Remote (Anywhere)
Job Type: Full-time
Pay: 2k – 8k USD/month
Application Ends: Apr 30, 2025
About the Role
With the increasing complexity of cyber threats, web application security, and ethical hacking, penetration testing is crucial in protecting businesses worldwide. We are looking for experienced Web Application Penetration Testers, Red Team Operators, and Cybersecurity Professionals to identify vulnerabilities and strengthen security across web applications, cloud environments, enterprise IT systems, and corporate networks.
Key Responsibilities
- Conduct penetration testing, ethical hacking, and security assessments on web applications, networks, cloud infrastructures (AWS, Azure, GCP), and enterprise IT environments.
- Identify and exploit vulnerabilities such as SQL Injection (SQLi), Cross-Site Scripting (XSS), Server-Side Request Forgery (SSRF), Remote Code Execution (RCE), and Insecure Direct Object References (IDOR).
- Perform network security assessments, including port scanning, vulnerability analysis, privilege escalation, and Active Directory (AD) security testing.
- Utilize cybersecurity tools such as Burp Suite, Metasploit, Nmap, Wireshark, Nessus, Acunetix, Kali Linux, and BloodHound for comprehensive security evaluations.
- Develop and execute custom scripts, automation tools, or exploits for penetration testing scenarios.
- Conduct post-exploitation analysis, privilege escalation, and persistence techniques.
- Provide detailed security reports, risk assessments, remediation plans, and mitigation strategies.
- Stay updated on zero-day vulnerabilities, exploit development, cloud security threats, and evolving cyberattack techniques.
Qualifications & Skills
- Hands-on experience in penetration testing, web security, vulnerability assessments, and red teaming.
- Strong understanding of ethical hacking methodologies including OSSTMM, OWASP Top 10, PTES, NIST, MITRE ATT&CK, and CIS Benchmarking.
- Proficiency in web application security testing, cloud security (AWS, Azure, GCP), and API security.
- Experience in network security, firewall evasion, social engineering, and Wi-Fi security testing.
- Knowledge of reverse engineering, malware analysis, exploit development, and buffer overflow techniques is a plus.
- Familiarity with Active Directory attacks, Kerberoasting, Pass-the-Hash, Mimikatz, BloodHound, and PowerShell Empire is highly desirable.
- Proficiency in scripting/programming (Python, Bash, PowerShell, JavaScript, or C) for security automation and exploit development.
- Relevant certifications such as OSCP, OSCE, OSEP, CRTP, CEH, GPEN, CISSP, eWPTX, or GXPN are highly preferred.
#PenetrationTesting #WebSecurity #EthicalHacking #CybersecurityJobs #RemoteWork #RedTeam #BugBounty #ApplicationSecurity #AppSec #CloudSecurity #OSCP #OffensiveSecurity #SecurityTesting #BlueTeam #CyberThreats #InfoSecJobs #SecurityResearch #SOC #HackerJobs #VulnerabilityResearch
