FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in web, API, and infrastructure penetration testing, with a strong focus on identifying and validating security vulnerabilities using established methodologies and tools. Proficient in producing detailed reports that articulate risks and remediation strategies while collaborating effectively with team members.
Highest-signal resume keywords
Web Application Security TestingAPI Security TestingPenetration Testing CertificationsBurp SuiteNmap
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Penetration TestingVulnerability IdentificationManual Testing TechniquesRisk AssessmentExploit ValidationAuthentication FlawsSession ManagementInput ValidationInjection VulnerabilitiesAdversary Simulation
Soft Skills
Documentation SkillsReporting SkillsCollaboration
Tools & Technologies
Burp SuiteNmapSqlmap
Certifications & Qualifications
OSCPOSWACWESBSCP
Industry Keywords
OWASPAttack Surface MappingPrivilege EscalationLateral MovementSecurity Frameworks
About the role
Key responsibilities & impact- Perform web, API, mobile, and infrastructure penetration testing across enterprise applications
- Identify, exploit, and validate security vulnerabilities using manual testing techniques and industry tools
- Conduct testing according to established methodologies and security frameworks such as OWASP
- Produce structured reports covering vulnerabilities, root causes, business impact, risk ratings, and remediation recommendations
- Research new vulnerabilities, exploits, and attack techniques to enhance testing coverage
- Support re-testing to validate remediation of identified issues
- Support Red Team or adversary simulation exercises when required
- Contribute to reconnaissance, attack-surface mapping, and identification of potential attack paths
- Support documentation of attack paths and security gaps
- Assist with controlled exploitation, including initial access techniques and limited post-exploitation validation
- Collaborate with senior team members to understand real-world attacker behavior and techniques
Requirements
What you’ll need- Bachelor’s degree in computer science, Information Security, or a related field
- Practical penetration testing certifications such as OSCP, OSWA, CWES, or BSCP are desired but not required
- 2+ years of hands-on professional experience in web application security testing, API security testing, and basic network/infrastructure testing
- Strong understanding of authentication, session management, access control flaws, input validation, and injection vulnerabilities
- Experience with Burp Suite, Nmap, sqlmap, or similar tools
- Ability to perform manual testing beyond automated scanning
- Strong documentation and reporting skills, with focus on clear risk articulation
- Basic understanding of adversary simulation concepts and attack lifecycle
- Familiarity with reconnaissance techniques and common initial compromise methods
- Awareness of privilege escalation, lateral movement, and attack paths across enterprise environments
- Must be able to satisfactorily complete applicable background checks prior to the start date and during employment
Benefits
Comp & perks- Wellness programs supporting mental, physical, and financial health
- Career-path opportunities
- Networking potential
- Hybrid work with flexibility to work from home or in the office
- Incentive plans for eligible employees, with discretionary payments based on individual and company performance
- Accommodation support during the application process
- Diverse and inclusive workplace