Penetration Tester

Role Overview

Responsibilities

• Identify, validate, and document security vulnerabilities.
• Assess security weaknesses through controlled exploitation techniques.
• Prepare detailed penetration testing reports, including risk ratings, technical evidence, business impact, and remediation recommendations.
• Conduct retesting after remediation to validate the effectiveness of corrective actions.
• Support vulnerability assessment and security testing activities.
• Provide recommendations to strengthen security controls and reduce exposure to cyber threats.
• Link identified vulnerabilities and penetration testing findings with the organization's Cybersecurity Risk Register.
• Assess the risk impact of identified vulnerabilities and support the classification of findings based on likelihood, impact, and overall risk level.
• Coordinate with relevant teams to follow up on risk treatment plans, remediation actions, and closure status.
• Support risk owners in understanding technical findings, associated risks, and required mitigation actions.
• Track open findings and ensure proper documentation of remediation, risk acceptance, or compensating controls.
• Provide technical input to support cybersecurity risk management activities and improve the organization's overall security posture.

Requirements

• Ability to identify, validate, and document security vulnerabilities.
• Ability to assess security weaknesses through controlled exploitation techniques.
• Ability to prepare detailed penetration testing reports with risk ratings, technical evidence, business impact, and remediation recommendations.
• Ability to conduct retesting after remediation to validate corrective actions.
• Ability to assess risk impact and classify findings by likelihood, impact, and overall risk level.
• Ability to coordinate with teams on risk treatment plans, remediation actions, and closure status.