Penetration Testing Engineer (Renewable Contract)

Key Responsibilities

• Conduct penetration testing, vulnerability assessments, and security reviews on web applications, mobile applications, networks, APIs, and cloud environments.
• Perform ethical hacking exercises to identify security weaknesses and recommend remediation measures.
• Analyze security findings, prepare detailed reports, and present recommendations to technical and non-technical stakeholders.
• Work with development, infrastructure, and security teams to validate remediation efforts and perform re-testing.
• Support secure software development and Application Security initiatives.
• Utilize industry-standard security tools such as Burp Suite, Nessus, Nmap, Metasploit, Kali Linux, and OWASP testing frameworks.
• Monitor emerging cyber threats, attack techniques, and industry best practices.
• Assist in security audits, compliance assessments, and incident response activities when required.

Requirements

• Degree holder in Information Technology, Computer Science, Cyber Security, or a related discipline.
• 2+ years of hands-on penetration testing or offensive security experience.
• Strong knowledge of Web Application Security, Network Security, Cloud Security, and common attack vectors.
• Familiarity with OWASP Top 10, MITRE ATT&CK Framework, and security testing methodologies.
• Strong verbal and written communication skills in both English and Chinese.