[Hiring] Penetration Tester @Velero

Role Description

In this role, you will help clients uncover vulnerabilities across a range of environments and contribute to security assessments that support both technical resilience and regulatory readiness. This is an opportunity for a penetration tester who enjoys tackling varied engagements, communicating findings clearly, and translating complex security issues into practical next steps for internal teams and clients.

• Conduct penetration tests on web applications, mobile applications, and APIs to identify vulnerabilities and potential exploits.
• Perform network penetration testing, including internal and external network assessments, to ensure comprehensive coverage of security weaknesses.
• Implement social engineering techniques such as phishing campaigns to simulate real-world attacks and identify human-related security risks.
• Prepare detailed technical reports and provide actionable recommendations based on the results of penetration tests.
• Collaborate with internal teams and external clients to discuss findings, mitigation strategies, and security best practices.
• Ensure compliance with relevant security standards and regulations, including GDPR, PCI-DSS, SOC 2, and others.
• Stay up to date on emerging threats, vulnerabilities, and security best practices.

Qualifications

• Proven experience (3+ years) in penetration testing across web apps, mobile apps, APIs, and network environments.
• Expertise in internal and external network penetration testing.
• Knowledge of common security vulnerabilities and attack vectors, such as those listed in OWASP Top 10 and MITRE ATT&CK.
• Familiarity with industry-standard tools like Burp Suite, Nmap, Metasploit, Wireshark, Nessus, and others.
• Experience with cloud environments (AWS, Azure, Google Cloud) is a plus.
• Strong understanding of GDPR, PCI-DSS, SOC 2, and other regulatory frameworks.
• Excellent verbal and written communication skills, with the ability to present findings to technical and non-technical audiences.

Requirements

• Offensive Security Certified Professional (OSCP), Certified Ethical Hacker (CEH), GIAC Penetration Tester (GPEN), or similar certifications.
• Experience with mobile security frameworks and tools such as OWASP Mobile Security Testing Guide (MSTG).
• Experience in API security testing, including OAuth and other common API security models.
• Proficiency in one or more programming/scripting languages (Python, Bash, JavaScript, etc.).

Benefits

• Competitive compensation of 120-160 USD per hour.
• Flexibility of remote work with a nearshore focus.