Penetration Tester

Company Description

Apphaz Security Solutions is a trusted offensive security partner helping organizations proactively identify, assess, and mitigate security vulnerabilities. We offer a comprehensive suite of manual offensive security services and automated vulnerability assessments through our in-house Apphaz ScanEngine platform.

Our expert team combines deep technical expertise with enterprise-grade tools and proprietary methodologies to deliver accurate, actionable, and business-relevant security insights. From web and mobile application penetration testing to infrastructure and API assessments, Apphaz ensures your digital assets are secure, compliant, and resilient against real-world cyber threats.

Role Description

Apphaz Security Solutions is seeking a Penetration Tester with 3–5 years of hands-on experience in offensive security. This is a full-time role focused on conducting advanced security assessments across web, mobile, API, cloud, and infrastructure environments.

The Senior Penetration Tester will lead and execute manual offensive security engagements and leverage our in-house Apphaz ScanEngine platform for automated vulnerability assessments. The role involves identifying, validating, and exploiting vulnerabilities to simulate real-world attack scenarios. You’ll be responsible for preparing detailed technical reports, communicating findings to clients, and recommending effective remediation strategies.

Qualifications

• 3–5 years of professional experience in penetration testing, red teaming, or offensive security consulting
• Strong expertise in Web and Mobile Application Security Testing, Network Penetration Testing, and Cloud Security Assessments (AWS, Azure, GCP)
• Proven experience in conducting Red Team or Adversary Simulation exercises
• Proficiency with tools such as Burp Suite, Nmap, Metasploit, OWASP ZAP, and custom scripting (Python/Bash)
• Solid understanding of OWASP Top 10, MITRE ATT&CK, and NIST frameworks
• Strong written and verbal communication skills with the ability to interact directly with clients and collaborate within a team
• Bachelor’s degree in Computer Science, Information Security, or a related field
• Preferred Certifications: OSCP, OSWE, CEH, CRTP, or equivalent