Security Penetration Tester

Company Description
Threat

XIntel  is a growing  Cybersecurity, IT Staffing, and Consulting company  delivering end-to-end technology and security solutions. Our services include  cloud security, web and mobile application security testing, Dev Sec Ops , vulnerability assessments, IT consulting, and professional staffing services .
We support global corporate clients by  hiring and deploying skilled professionals  across IT and cybersecurity domains while helping organizations strengthen security, optimize operations, and scale efficiently. Threat

XIntel is committed to enabling business growth through secure, reliable, and high-quality technology solutions.

Role Overview
We are looking for an experienced  Security Penetration Tester  with strong expertise in identifying vulnerabilities, performing ethical hacking, and strengthening enterprise security posture. The ideal candidate will have hands-on experience in  application, network, and infrastructure penetration testing , along with the ability to simulate real-world cyberattacks and provide actionable remediation recommendations.
This role requires deep technical knowledge of offensive security techniques and the ability to work closely with development, infrastructure, and security teams to ensure robust protection against cyber threats.

Key Responsibilities
Conduct  web application, network, API, and infrastructure penetration testing .
Perform  vulnerability assessments and ethical hacking  using industry-standard tools.
Identify security vulnerabilities and provide  risk assessment with remediation guidance .
Execute  red team exercises and simulated attack scenarios .
Perform  manual and automated security testing  of systems and applications.
Prepare detailed  technical security reports and executive summaries .
Work with development teams to  validate vulnerability fixes and perform retesting .
Stay updated with  latest attack techniques, security vulnerabilities, and threat intelligence .
Support  security audits and compliance requirements  where necessary.

Required Qualifications
5+ years of experience  in penetration testing or offensive security roles.
OSCP (Offensive Security Certified Professional) certification – Mandatory .
Strong experience in  web application security testing (OWASP Top 10) .

Experience with  network penetration testing and vulnerability assessments .
Hands-on experience with security testing tools such as:
Burp Suite
Metasploit
Nmap
Nessus
Wireshark
Kali Linux
Good understanding of  common attack vectors, exploitation techniques, and security controls .
Strong knowledge of  TCP/IP, networking protocols, and operating systems security .
Ability to write  clear technical vulnerability reports .

Preferred Qualifications
Additional certifications such as  CEH, GPEN, GWAPT, OSWE .
Experience in  cloud security testing (AWS, Azure, GCP) .
Knowledge of  secure coding practices and Dev Sec Ops  .

Experience with  API security testing.

Skills
Penetration Testing
Ethical Hacking
Vulnerability Assessment
Web Application Security
Network Security
OWASP Top 10
Exploitation Techniques
Security Tools (Burp Suite, Metasploit, Nmap)