Penetration Tester

SoCyber is a cybersecurity company on a mission to solve complex cybersecurity problems, and help organisations across all industries and sizes fortify their cybersecurity defences. We provide a wide range of security, compliance and vulnerability management solutions.

Our passionate team of experts is working on projects covering the full spectrum of digital and physical infrastructure. SoCyber is partnered with leading organisations worldwide, offering you the chance to learn from seasoned professionals and make a real difference in the fight against cyber threats.

We are a tight and supportive team, dedicated to learning and growing together. If you are looking to progress your career by solving complex problems in a competitive environment, apply today!

Job Overview

As a Penetration Tester, you will be a key contributor to our security team, responsible for conducting comprehensive penetration testing assessments and delivering insightful reports. Your expertise will be crucial in identifying vulnerabilities and recommending effective remediation actions. In addition, you will play a vital role in client engagement, knowledge sharing, and the continuous improvement of our security services.

We offer a flexible hybrid work model depending on the current project requirements.

Responsibilities

• Perform comprehensive penetration tests on applications, networks, and systems

• Prepare well-written reports in English, presenting technical and non-technical findings with actionable remediation advice.

• Analyse systems for vulnerabilities and attack surfaces, providing comprehensive assessments and remediation recommendations.

Skills and Experience Required

• Demonstrate a successful track record in penetration testing across web, API, mobile, and thick-client applications.

• Possess a strong understanding of various operating systems, network principles, and security frameworks such as OWASP, PTES, and MITRE ATT&CK.

• Exhibit strong analytical and problem-solving abilities, along with proficiency in scripting or programming languages to automate tasks and create custom tools.

• Hold relevant security certifications (e.g., OSCP, CREST CRT, OSWE, CCT APP) to validate your expertise.

• Must be able to collaborate with international teams, requiring intermediate level English proficiency (B1 or equivalent).

Nice to Have

• Cloud and hybrid environment experience: Knowledge of assessing cloud (AWS, Azure) and/or hybrid environments is advantageous.

• Source code review skills: Experience in conducting source code reviews in your preferred programming language is a plus.

• Social engineering knowledge: Familiarity with preparing and launching social engineering campaigns is beneficial.

• Research and development experience: Involvement in research projects, tool development, or training delivery showcases your initiative and passion for security.

What We Offer:

• 25 days off
• Additional health and dental insurance
• Hybrid working
• Friendly and relaxed environment
• Competitive remuneration
• Career development in a progressive start-up