Penetration Tester

We are seeking a skilled Penetration Tester with strong experience in CI/CD pipeline security to identify, assess, and mitigate security vulnerabilities across applications, infrastructure, and automated deployment environments.

Requirements

• Conduct penetration testing on web applications, APIs, networks, and cloud environments.
• Perform security assessments of CI/CD pipelines, including build, test, and deployment workflows.
• Identify vulnerabilities related to source code repositories, automation tools, container images, and secrets management.
• Test authentication, authorization, session management, and access controls.
• Assess API security, including token handling, rate limiting, and authorization flaws.
• Execute static (SAST), dynamic (DAST), and dependency security testing within CI/CD processes.
• Validate security of containerized environments (Docker, Kubernetes).
• Simulate real-world attack scenarios and document findings with clear remediation guidance.
• Collaborate with development and DevOps teams to implement secure-by-design practices.
• Support incident response investigations and post-incident analysis when required.