Penetration Tester & Ethical Hacker Web, API & Network Security

We're a team that takes security seriously, and we're looking for someone who does too. We need an experienced Penetration Tester who can dig into our web applications, APIs, and network infrastructure and find the weaknesses before anyone else does. This isn't a checkbox exercise — we want someone who thinks like an attacker and communicates like a professional. What you'll be doing: You'll run penetration tests across our web apps, APIs, and network environment, manually and with tools, using frameworks like OWASP Top 10 as a baseline not a ceiling. When you find something, you'll document it clearly, prioritize it by real-world risk, and give us concrete steps to fix it. After fixes are applied, you'll retest to make sure they actually hold. What we're looking for: Someone with hands-on experience across web, API, and network testing — not just theory. You should be comfortable with tools like Burp Suite, Nmap, and Metasploit, and just as comfortable writing a report that makes sense to both a developer and a non-technical executive. Certifications like OSCP or CEH are a plus, but your track record matters more. Bonus points if you have: Experience testing SaaS or cloud environments (AWS, Azure, GCP), or familiarity with compliance frameworks like SOC 2 or ISO 27001. To apply: Share your relevant experience, any certifications you hold, and a sample report or case study if you have one. We'd love to see your work, not just your resume.