Penetration Tester

Job description

Introduction
At IBM, work is more than a job - it's a calling: To build. To design. To code. To consult. To think along with clients and sell. To make markets. To invent. To collaborate. Not just to do something better, but to attempt things you've never thought possible. Are you ready to lead in this new era of technology and solve some of the world's most challenging problems? If so, lets talk.

Your Role and Responsibilities

·  Assist in conducting penetration tests on various systems, applications, and network infrastructure.
·  Collaborate with senior penetration testers to identify vulnerabilities, weaknesses, and security gaps.
·  Support remediation activities by providing clear and concise recommendations for addressing identified vulnerabilities.
·  Participate in vulnerability assessment and risk analysis to prioritize remediation efforts.
·  Help develop and maintain documentation related to penetration testing processes, findings, and remediation strategies.
·  Review the findings with the Application Security Specialist in finalizing the test report
·  Support application teams in explaining the recommended remediation for identified vulnerabilities
·  Identify remediation exceptions, where required for management review and exception approval
·  Measure, track and report remediation status during the governance meetings.
·  Contribute to the improvement of penetration testing methodologies and techniques.
·  Assist in creating executive-level reports detailing findings, risks, and recommended actions.
#ConsultingTH2022

Required Technical and Professional Expertise

·  Bachelor’s degree in computer science, Cybersecurity, Information Technology, or a related field (or equivalent experience).
·  Basic understanding of penetration testing concepts, methodologies, and tools.
·  Familiarity with common network protocols, operating systems, and application security.
·  Experience with penetration testing tools such as Metasploit, Burp Suite, Nmap, etc.

Preferred Technical and Professional Expertise

·  Knowledge of scripting languages (e.g., Python, PowerShell) for automation and tool development.
·  Understanding of web application security, mobile application security, and cloud security.
·  Familiarity with regulatory compliance frameworks (e.g., PCI DSS, HIPAA, GDPR).
·  Strong problem-solving skills and attention to detail.
·  Excellent communication skills, both written and verbal.
·  Ability to work collaboratively within a team and independently when required.
·  Relevant certifications such as CompTIA Security+, Certified Ethical Hacker (CEH), or similar, is a plus.