Penetration Tester
Bright Security
WorldwideFully remoteFull TimeMid LevelInformation Technology
Posted 6 hours ago6h agoApply link checked 5 hours ago
Why we think you can apply
- Hiring model
- Open worldwide · the employer states no country restriction
- Work from
- Anywhere, the UAE included
Posted 6 hours ago · apply link checked 5 hours ago
About the role
Responsibilities
- Perform manual and automated penetration testing of web applications and APIs
- Plan and execute assessments independently, from scoping through reporting
- Test authentication, authorization, session management, access control and business logic
- Develop and validate proof-of-concept exploitation where appropriate
- Produce clear, customer-ready findings and reports with remediation guidance
- Retest fixes and contribute to methodologies and tooling
Requirements
- Hands-on penetration testing or offensive security experience
- Strong knowledge of OWASP Top 10 and OWASP API Security Top 10
- Meaningful manual testing skills beyond automated scanners
- Experience writing professional penetration testing reports
- Familiarity with Burp Suite, Nmap, Postman and command-line tooling
- Scripting ability in Python, JavaScript or Bash
- Very good to excellent written and spoken English
Preferred Qualifications
- Bug bounty participation or independently discovered vulnerabilities
- Experience with cloud, mobile, red team or AI/LLM application security
- Familiarity with DAST, SAST, CI/CD security testing or DevSecOps
- Relevant offensive security certifications
About the Company
Bright Security delivers a developer-centric DAST platform that helps organizations find and remediate vulnerabilities across the SDLC.
What we look for
- Hands-on penetration testing or offensive security experience
- Strong knowledge of OWASP Top 10 and OWASP API Security Top 10
- Meaningful manual testing skills beyond automated scanners
- Experience writing professional penetration testing reports
- Familiarity with Burp Suite, Nmap, Postman and command-line tooling
- Scripting ability in Python, JavaScript or Bash
- Very good to excellent written and spoken English
- Bug bounty participation or independently discovered vulnerabilities
- Experience with cloud, mobile, red team or AI/LLM application security
- Familiarity with DAST, SAST, CI/CD security testing or DevSecOps
- Relevant offensive security certifications
PythonJavaScriptBashPostmanHTTPAPI SecurityPenetration TestingOWASPBurp SuiteNmap
SponsorWake up to a shortlist, not a search results page.
NeverApply scores every new listing against your CV, salary floor and visa. A handful of real matches by morning.
Get your daily matchesSimilar jobsbased on title, category and scope
Bright Security
SponsorWake up to a shortlist, not a search results page.
NeverApply scores every new listing against your CV, salary floor and visa. A handful of real matches by morning.
Get your daily matchesPenetration TesterBright Security · free account, 30 seconds