کاردۆز
گەڕانەوە بۆ کارەکان

شرۆڤە

We’re Hiring: VAPT & Security Testing Mid-Level Penetration Tester Location: Erbil, Iraq Employment Type: Full-time Department: VAPT & Security Testing Department About the Role: Execute network, application, and infrastructure penetration tests; conduct vulnerability assessments; and produce detailed technical findings reports to support risk remediation. Key Responsibilities: • Conduct internal and external network penetration tests and vulnerability assessments • Perform web application, API, and mobile application security testing (OWASP methodology) • Run authenticated and unauthenticated vulnerability scans and validate findings manually • Analyses and reproduce CVEs affecting Bank systems; assessing real-world exploitability • Draft detailed technical penetration test reports with risk ratings, PoC evidence, and remediation recommendations • Verify remediation effectiveness through re-testing after fixes are applied • Contribute to developing custom attack scripts and testing tools • Support junior analysts with technical guidance on test methodology Requirements: • Network and web application penetration testing methodology (OWASP, PTES) • Vulnerability scanning and manual validation • Exploit development and post-exploitation techniques • Technical report writing with clear risk ratings and remediation steps • Familiarity with cloud security testing (AWS, Azure) Qualifications: • BSc in Information Security or Computer Science • CEH, or GPEN certification (mandatory) • hands-on penetration testing and VAPT • Experience with Burp Suite, Metasploit, Nmap, Nessus/Tenable, and similar tooling What We Offer: Competitive salary and benefits. Professional growth and development opportunities. Dynamic and collaborative work environment. Opportunity to join Iraq’s First Digital Bank. How to Apply: Interested candidates are invited to submit their CV to: [email protected] Email Subject: (VAPT & Security Testing Mid-Level Penetration Tester ) Applications without the required subject line will not be considered. Only shortlisted candidates will be contacted.