Security Operation Pentester

Conduct end-to-end security testing on web applications, mobile apps (iOS/Android), APIs, network infrastructure, and internal systems. Simulate advanced real-world attack scenarios to evaluate the effectiveness of our detection and response capabilities. Actively monitor global cyber threat intelligence, zero-day vulnerabilities, and new CVEs. Perform rapid impact analysis to determine if new threats affect BFI's IT environment. Produce clear CVE Impact Reports & Advisories with actionable mitigation/remediation steps for technical teams. Work closely with Developers, DevOps, and IT Infrastructure teams to guide and verify security flaw fixes. Translate complex technical vulnerabilities into executive-ready risk reports highlighting business impacts. Minimum 5 years of hands-on experience in Cybersecurity, specifically as a Penetration Tester, Red Team Operator, or Vulnerability Assessor. Mandatory Certification (Must hold at least ONE): OSCP (Offensive Security Certified Professional) OSWE (Offensive Security Web Expert) OSEP (Offensive Security Experienced Penetration Tester) Other certifications like GPEN, GWAPT, GXPN, HTB CPT/CWEE, eCPPT, eWPTX, or CPENT are strong advantages. Proven track record of discovering vulnerabilities via official platforms (HackerOne, Bugcrowd, Intigriti) or corporate VDPs. Evidence required: Profile links, Hall of Fame (HoF) mentions, or official acknowledgment certificates.