Penetration Tester – Network, Web, Mobile, API & Cloud

About the role

OwnZap Infosec is looking for motivated Penetration Testers to assess the security of web, mobile, API, network and cloud environments. Whether you are a fresher or an experienced professional, you will work on real‑world engagements and help clients improve their security posture.

Key responsibilities

• Perform manual penetration testing of web applications, mobile apps, APIs, network infrastructure and cloud platforms.
• Plan and execute testing engagements using industry‑standard methodologies.
• Evaluate, select and operate a range of security testing tools.
• Validate and eliminate false positives from automated scanners.
• Identify, exploit and document vulnerabilities with clear proof‑of‑concepts.
• Conduct root‑cause analysis and recommend practical remediation measures.
• Prepare detailed technical reports and communicate findings to development teams.
• Stay current with emerging vulnerabilities, exploits and cybersecurity research.

Required profile

• Passion for cybersecurity and ethical hacking.
• Strong analytical and problem‑solving abilities.
• Good written communication and report‑writing skills.
• Continuous learning mindset and willingness to explore new attack techniques.

Required skills

• Understanding of HTTP/HTTPS, SSL/TLS, PKI, HTTP methods, headers, cookies, sessions, authentication and authorization.
• TCP/IP networking fundamentals.
• Knowledge of OWASP Top 10, OWASP API Security Top 10, OWASP Mobile Top 10 and SANS/CWE Top 25.
• Basic scripting in Python, Bash, PowerShell or JavaScript.
• Hands‑on experience with Burp Suite, Nmap, Nessus, Metasploit, MobSF, Wireshark or similar tools.
• Cloud security knowledge (AWS, Azure or GCP) is a plus.
• Malware analysis or reverse‑engineering experience is an added advantage.