سرپرست تست نفوذ

توضیحات آگهی

HR Bamboos connects exceptional professionals with reputable organizations across Iran and international markets
We are seeking an experienced Penetration Test Lead to join our client a growing e commerce company and lead complex security assessments and Red Team engagements across applications infrastructure and cloud environments
This role is ideal for a Penetration Testing Lead with strong expertise in penetration testing adversary simulation vulnerability analysis and security assessment who is passionate about uncovering realistic attack paths validating security controls and strengthening the organization s overall security posture
Key Responsibilities
Penetration Testing Security Assessment
Lead and execute penetration tests across web and mobile applications APIs networks infrastructure cloud Kubernetes and containerized environments
Define assessment scopes testing methodologies Rules of Engagement severity criteria and reporting standards
Conduct hands on security testing source code reviews and vulnerability validation with a focus on business impact and risk
Re test remediated vulnerabilities and validate the effectiveness of security fixes
Red Team Detection
Design and lead Red Team and adversary simulation exercises to uncover realistic attack paths and validate security controls
Collaborate with SOC and Blue Team members to assess and improve detection and response capabilities
Support security investigations and contribute to identifying and addressing emerging security risks
Security Engineering Reporting
Partner with Engineering Development DevOps and SRE teams to integrate security testing into the SDLC and CI CD pipelines
Produce clear technical reports with practical remediation guidance and track remediation through to completion
Track security and remediation metrics and provide insights to improve security
assessment and remediation processes
Technical Leadership
Lead and mentor penetration testing engineers and review findings from internal and external security assessments
Maintain assessment quality standards and drive consistency across security testing activities
What You Bring
6 years of professional experience in penetration testing offensive security or a related field
Strong skills in web mobile API network infrastructure and cloud security testing
Strong skills in Red Team operations and MITRE ATT CK aligned adversary simulation
Strong knowledge of OWASP vulnerability exploitation attack path analysis threat modeling and security architecture
Strong understanding of Linux and Windows security authentication authorization databases and middleware
Hands on experience assessing Kubernetes containerized workloads and cloud environments
Proficiency with offensive security tools such as Burp Suite Nmap and Metasploit
Strong scripting skills in Python Bash or Go for security automation and tooling
Hands on DevSecOps experience with CI CD security testing including SAST DAST SCA secret scanning container scanning and IaC scanning
Strong skills in vulnerability analysis risk prioritization and technical security reporting
Strong technical leadership mentoring and security assessment quality management skills
Strong communication collaboration and stakeholder management skills across Engineering Security DevOps and leadership teams
Nice to Have
Certifications such as OSCP OSEP OSWE GPEN or similar
Experience with Active Directory security privilege escalation and lateral movement
Experience with tools such as BloodHound Nessus SQLMap Cobalt Strike or similar platforms
Experience conducting cloud security assessments across AWS Azure or GCP
What We Offer
Competitive compensation and benefits
Professional growth and development opportunities
The opportunity to lead high impact security initiatives and strengthen the security posture of a growing e commerce company
If you re looking for a dynamic environment where your ideas perspective and contributions can make a meaningful impact on both your professional growth and the organization s success we d love to hear from you
Apply now
We maintain the highest level of confidentiality throughout the recruitment process
شرکت مشاوران پیشرو همدستان
دسته بندی امنیت سایبری و امنیت اطلاعات
نحوه همکاری تمام وقت
نوع همکاری حضوری
مدرک تحصیلی کامپیوتر و فناوری اطلاعات
سابقه کار مدیر میانی
حقوق 1000000000 تا and more میلیون تومان
شهر تهران