Job Description/ Responsibilities
Responsible for simulating cyberattacks on systems, networks, and applications to identify vulnerabilities before malicious actors can exploit them.
1. Security Testing & Assessments
• Conduct penetration testing on:
o Web applications –
o Network and infrastructure –
o Desktops/Servers Linux and Windows –
o APIs, cloud environments, and mobile apps •
• Perform vulnerability assessments using automated tools and manual techniques
• Simulate real-world cyberattacks to evaluate system resilience 2.
2. Exploitation & Analysis
a. Identify and exploit weaknesses in systems and applications
b. Analyze security flaws, misconfigurations, and insecure code
c. Test authentication systems, access controls, and network defenses
d. Identify exploitable credentials and attack paths
3. Reporting & Documentation
a. Document all findings, methodologies, and evidence of vulnerabilities
b. Prepare detailed technical and executive reports
c. Communicate risks and remediation recommendations to stakeholders
4. Remediation & Security Improvement
a. Recommend solutions to address identified security gaps and vulnerabilities
b. Work with development and infrastructure teams to implement fixes
c. Validate remediation through re-testing and follow-ups
5. Tooling & Automation •
a. Use security tools such as: – Metasploit, Nmap, Burp Suite, Kali, Vulnerability Scanners, Pentera Console and Surface
b. Develop scripts (Python, Bash) to automate testing processes
c. Design custom exploits and testing methodologies
6. Continuous Learning & Threat Research
a. Stay updated on: o Emerging threats
b. Exploitation techniques
c. Security vulnerabilities (OWASP, CVEs)
d. Research new attack vectors and penetration testing techniques
7. Collaboration & Advisory
a. Work with:
i. Security teams
ii. Developers
iii. IT operations and/or Infrastructure Teams
iv. Educate teams on secure coding and security best practices • Support compliance, audits, and risk assessments