Penetration Tester

About The Position Requirements Minimum of 1 year of experience in Web application and API penetration testing Familiarity infrastructure testing OSCP / OSEP / CCSP / CRTE / CRTP or CRTO certification or equivalent - An advantage Proficiency in OWASP top 10 vulnerabilities Android and IOS application penetration testing Self-driven, motivated, independent yet communicative & collaborative High English level with excellent verbal and written skills Responsibilities Conduct comprehensive penetration testing and vulnerability assessments on web applications, networks, and other systems Perform manual and automated testing in various engagements such as internal/external networks, web applications, and mobile and cloud environments Develop custom scripts and tools to automate testing processes Identify security weaknesses and provide recommendations to improve security posture Guide clients on the mitigations of vulnerabilities Stay up-to-date with industry developments and best practices Collaborate with the team to improve internal processes and methodologiesScytale is a global leader, an AI-powered company transforming how organizations achieve and maintain trust and compliance. Our platform automates frameworks SOC 2, ISO 27001, SOX ITGC, GDPR, PCI DSS, and 45+ more frameworks, making compliance smarter, faster, and continuously audit-ready.Built for startups, scale-ups, and enterprises, Scytale combines intelligent automation, real-time monitoring, and AI-driven insights to reduce manual work and eliminate compliance blind spots. Recognized as a Leader in GRC and an AWS Rising Star Partner of the Year, Scytale is trusted by hundreds of companies worldwide and known for its technology and partnership-driven approach.The Ideal candidate will be responsible for conducting comprehensive penetration tests, identifying vulnerabilities, and providing recommendations to improve security posture. Candidates must have experience in web application security and infrastructure, be highly motivated, and have a good command of industry best practices such as OWASP TOP10.