Penetration Tester

Location: Yerevan, Armenia Description: Digitain now welcomes a highly skilled and motivated Middle Penetration Tester to join our team. The ideal candidate is expected to be responsible for identifying and evaluating vulnerabilities in our clients' systems and applications, conducting penetration testing exercises, and providing recommendations for enhancing security measures. You will work closely with cross-functional teams to ensure the implementation of robust security controls and mitigate potential risks. Responsibilities: Conduct comprehensive penetration testing on various systems, applications, and networks to identify vulnerabilities, weaknesses, and potential security risks Execute manual and automated testing methodologies to identify security flaws in networks, web applications, mobile applications, and infrastructure components Perform analysis and validation of security findings, and provide detailed reports outlining the identified vulnerabilities and potential impact to stakeholders Collaborate with development teams, system administrators, and other stakeholders to provide remediation recommendations and follow up on the implementation of necessary security controls Stay up to date with the latest security threats, vulnerabilities, and attack techniques, and incorporate this knowledge into penetration testing methodologies Contribute to the improvement of existing penetration testing frameworks, tools, and processes to enhance efficiency and effectiveness Assist in the development and maintenance of security policies, procedures, and guidelines Participate in incident response activities, including investigation and remediation of security incidents Provide guidance and mentorship to junior members of the team, assisting in their skill development and knowledge enhancement Requirements: At least 2 years of experience in penetration testing or QA Bachelor's degree in Computer Science, Information Security, or a related field Proven experience in conducting penetration testing and vulnerability assessments in a professional setting In-depth knowledge of network protocols, web application architecture, operating systems, and common security vulnerabilities Proficiency in using a variety of penetration testing tools, frameworks, and methodologies Strong understanding of common security standards, such as OWASP, NIST, and ISO 27001 Familiarity with regulatory compliance requirements, such as GDPR, HIPAA, or PCI DSS Excellent problem-solving and analytical skills, with the ability to think creatively and out-of-the-box Strong written and verbal communication skills, with the ability to clearly articulate technical concepts to both technical and non-technical stakeholders Ability to work effectively both independently and collaboratively in a fast-paced and dynamic environment High ethical standards, integrity, and a commitment to maintaining confidentiality Join our team and play a crucial role in strengthening the security posture of our clients. As a Middle Penetration Tester, you will have the opportunity to continuously enhance your skills and contribute to the protection of sensitive data and critical systems.