[GS] Cybersecurity - Penetration Test Engineer

About the job

• Perform penetration testing to identify potential vulnerabilities in web systems, cloud services and IoT solutions using hacking attacks.
• Perform risk assessment for identified vulnerabilities to design detailed penetration test report.
• Present findings to relevant stakeholders and technical teams to introduce testing procedure, methodology and vulnerability risk severity in technical dimension.
• Investigate and analyze vulnerabilities on software systems, to design protection measures to mitigate cybersecurity risks.
• Investigate, research and evaluate security industry trends and best practices.

• More than 1 years of experience in penetration testing, familiar with the steps, methods and processes of penetration testing, with strong penetration testing and vulnerability mining capabilities.
• Familiar with WEB and APP security, understand WEB and APP security requirements, and able to independently conduct penetration testing on WEB, Android and iOS platforms; familiar with common security vulnerabilities and pitfalls of various operating systems and databases, familiar with OWASP Top 10 vulnerabilities, SQL injection, XSS, CSRF, etc., and familiar with the intrinsic principles of the vulnerabilities, detection methodologies, exploitation, and the corresponding solutions.
• Proficient in commonly used security tools such as BurpSuite, Nmap, Sqlmap, Kali Linux, etc., understanding the principles, familiar with the script code.
• Be able to independently complete the penetration testing of the company's related applications and servers, and propose solutions to related vulnerabilities.
• OSCP certified or equivalent qualification is preferred
• Good verbal and written communication skills in English.

Further details regarding benefits will be shared during the interview process.