Our client, a leading technology firm in San Diego, California, US , is looking for a highly skilled Senior Penetration Tester to join their Information Security team. This role offers a hybrid work arrangement, providing a blend of in-office collaboration and remote flexibility. As a Senior Penetration Tester, you will be responsible for identifying security vulnerabilities in our client's networks, applications, and systems through ethical hacking techniques. You will conduct comprehensive security assessments, provide detailed reports on findings, and recommend remediation strategies to strengthen our security posture. Your expertise will be crucial in protecting sensitive data and ensuring the integrity of our digital assets.

Key Responsibilities:
Plan, scope, and execute penetration tests against various targets, including web applications, APIs, network infrastructure, cloud environments, and mobile applications. Employ a wide range of offensive security tools and techniques to simulate real-world attacks. Identify, analyze, and document security vulnerabilities, providing clear and actionable remediation recommendations. Conduct in-depth analysis of identified vulnerabilities, including risk assessment and potential impact. Develop and maintain comprehensive penetration test reports, including executive summaries and technical details. Collaborate with development, operations, and security teams to prioritize and track remediation efforts. Stay current with the latest threats, vulnerabilities, and penetration testing methodologies. Assist in the development and improvement of penetration testing methodologies, tools, and processes. Participate in security architecture reviews and provide input on secure design principles. Mentor junior penetration testers and contribute to team knowledge sharing. Maintain confidentiality and integrity of all sensitive information accessed during testing. Potentially contribute to red team exercises and adversary simulation.
Qualifications:
Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent practical experience. 5+ years of hands-on experience in penetration testing and vulnerability assessments. In-depth knowledge of common attack vectors, exploitation techniques, and security best practices. Proficiency with a variety of penetration testing tools (e.g., Burp Suite, Metasploit, Nmap, Wireshark). Experience testing web applications, APIs, and cloud environments (AWS, Azure, GCP). Understanding of networking protocols, operating systems, and security controls. Relevant security certifications such as OSCP, CEH, CISSP, or SANS GIAC are highly desirable. Excellent written and verbal communication skills, with the ability to clearly articulate technical findings to both technical and non-technical audiences. Strong problem-solving and critical thinking abilities. Ability to work independently and as part of a collaborative team. Join our dedicated security team and play a vital role in safeguarding our organization's digital frontier.