Penetration Tester ZainTech

Perform end-to-end vulnerability assessments and penetration testing (VAPT) across applications, networks, and systems

• Conduct web application, mobile application, and API security testing using both automated and manual techniques
• Perform network penetration testing to identify infrastructure vulnerabilities and misconfigurations
• Execute mitigation validation and re-testing activities, including testing for bypass techniques

Identify and exploit security vulnerabilities across different environments and technology stacks

• Conduct strong>false positive and false negative analysis/strong> and provide accurate validation of findings
• Perform secure code reviews when required to identify application-level vulnerabilities
• Analyze findings and prioritize risks based on severity and business impact

Document vulnerabilities, testing methodologies, and remediation recommendations in detailed reports

• Present findings to technical and non-technical stakeholders, including senior personnel
• Provide guidance to development and infrastructure teams on remediation approaches
• Perform re-testing of remediated vulnerabilities to ensure closure

• Utilize industry-standard tools such as Burp Suite, Metasploit, Kali Linux, intercepting proxies, and other security testing tools

• Apply frameworks such as OWASP Top 10 and OWASP Testing Methodologies
• Stay updated with emerging threats, vulnerabilities, and penetration testing techniques

• Collaborate with security, development, and infrastructure teams to improve security practices
• Contribute to improving internal testing methodologies and frameworks
• Support the development of security standards, guidelines, and best practices