About the Role
Growth in Value Alliance (GVA) Partners is seeking a skilled and driven Penetration Tester to proactively simulate real-world attacks, identify critical vulnerabilities, and protect enterprise infrastructure. In this role, you will think like an adversary while maintaining strict ethical standards and compliance frameworks, working closely with agile security and development teams.
Key Responsibilities- Conduct comprehensive black-box, gray-box, and white-box penetration tests on web applications, mobile apps, and APIs based on OWASP standards.
- Perform advanced red team exercises, social engineering, and phishing simulation campaigns.
- Develop, execute, and document custom exploits and proof-of-concept findings with risk-ranked reporting.
- Collaborate with developers, AppSec, and DevOps teams to provide actionable remediation guidance.
- Analyze security findings from bug bounty platforms and recreate complex vulnerabilities.
- Stay updated on emerging CVEs, threat actor TTPs, and modern exploitation tools.
- Bachelor's degree with a minimum of 5 years of proven experience in offensive security, ethical hacking, or bug bounty programs.
- Industry certifications such as CEH, OSCP, OSCE, or GPEN.
- Proficiency with security tools including Burp Suite, OWASP ZAP, Nmap, MobSF, Frida, and Kali Linux.
- Strong scripting skills in Python, Bash, or PowerShell for custom exploit development.
- Deep familiarity with security standards including OWASP Top 10, NIST 800-53, and ISO/IEC 27001.
- Exceptional analytical, communication, and report-writing skills.
- Competitive salary package with performance incentives.
- Opportunities for professional growth, continuous learning, and advanced security certifications.
- Dynamic and collaborative work environment with industry-leading experts.