Penetration Tester

DescriptionScytale is a fast-growing B2B SaaS startup transforming security, privacy and AI compliance for businesses worldwide. Our innovative Compliance-as-a-Service platform simplifies frameworks like SOC 2, ISO 27001, HIPAA, GDPR, and PCI DSS for startups, scale-ups, and enterprises. Recognized as a Governance, Risk & Compliance leader on G2, we’re a global leader in the security and compliance space.The Ideal candidate will be responsible for conducting comprehensive penetration tests, identifying vulnerabilities, and providing recommendations to improve security posture. Candidates must have experience in web application security and infrastructure, be highly motivated, and have a good command of industry best practices such as OWASP TOP10.RequirementsMinimum of 1 year of experience in Web application and API penetration testingFamiliarity infrastructure testingOSCP / OSEP / CCSP / CRTE / CRTP or CRTO certification or equivalent – An advantageProficiency in OWASP top 10 vulnerabilitiesAndroid and IOS application penetration testingSelf-driven, motivated, independent yet communicative & collaborativeHigh English level with excellent verbal and written skillsResponsibilitiesConduct comprehensive penetration testing and vulnerability assessments on web applications, networks, and other systemsPerform manual and automated testing in various engagements such as internal/external networks, web applications, and mobile and cloud environmentsDevelop custom scripts and tools to automate testing processesIdentify security weaknesses and provide recommendations to improve security postureGuide clients on the mitigations of vulnerabilitiesStay up-to-date with industry developments and best practicesCollaborate with the team to improve internal processes and methodologies