Mid-Level Penetration Tester

You will work on real-world security assessments for international clients across web applications, APIs, mobile applications, cloud environments, and network infrastructure. We are looking for someone who is technically strong, curious, comfortable working independently, and capable of thinking beyond automated scanners and standard checklists.

Responsibilities

• Conduct penetration testing across web applications, REST/GraphQL APIs, mobile applications, and network infrastructure.
• Perform primarily manual security testing focused on identifying real-world attack paths and business logic vulnerabilities.
• Identify, validate, and document vulnerabilities including authentication flaws, authorization issues, IDOR/BOLA, privilege escalation, injection vulnerabilities, SSRF, account takeover scenarios, and other security weaknesses.
• Perform security testing of Android and iOS applications.
• Analyze applications and APIs to understand complex workflows and identify vulnerabilities that automated tools may miss.
• Develop clear and detailed vulnerability reports including technical descriptions, reproduction steps, evidence, impact, and remediation recommendations.
• Communicate findings directly with clients and assist development teams with understanding and remediating security issues.
• Participate in vulnerability retesting and remediation verification.
• Collaborate with other penetration testers on complex engagements.
• Support junior security engineers and contribute to internal knowledge sharing.
• Stay current with new attack techniques, vulnerabilities, tools, and security research.

Requirements

• 2 to 4+ years of hands-on penetration testing experience.
• Strong experience testing web applications and APIs.
• Solid understanding of common vulnerability classes and exploitation techniques.
• Strong knowledge of HTTP, authentication mechanisms, sessions, OAuth, JWT, APIs, and modern web application architectures.
• Understanding of networking fundamentals, operating systems, and common network protocols.
• Ability to manually investigate and exploit vulnerabilities rather than relying primarily on automated scanners.
• Ability to write clear, professional penetration testing reports.
• Strong problem-solving and analytical skills.
• Good written and verbal English communication skills.
• Ability to manage assigned projects independently and meet deadlines.
• Comfortable communicating technical findings with both technical and non-technical stakeholders.

Nice to Have

• Bug bounty or vulnerability research experience.
• Experience identifying complex business logic vulnerabilities.
• Mobile application penetration testing experience.
• Active Directory or internal network penetration testing experience.
• Cloud security testing experience across AWS, Azure, or GCP.
• Source code review experience.
• Experience with scripting or programming using Python, Bash, JavaScript, Go, or similar languages.
  

What We Offer

At DeepStrike, penetration testers are at the core of what we do. You will have the opportunity to work on challenging security assessments rather than repetitive scanner-driven engagements.

Our benefits include:

• Competitive salary and performance-based incentives.
• Hybrid and remote working flexibility.
• Exposure to international clients and global technology companies.
• Challenging penetration testing engagements across different industries and technologies.
• Continuous hands-on learning and security research opportunities.
• Professional training and certification support.
• Learning and development budget.
• Opportunity to work alongside experienced penetration testers and security researchers.
• Direct exposure to modern applications, APIs, mobile platforms, cloud environments, and enterprise infrastructure.
• Fast decision-making and minimal bureaucracy.
• Clear opportunities for technical and career growth.

About DeepStrike

DeepStrike is an offensive cybersecurity company specializing in Penetration Testing as a Service (PTaaS) and advanced security assessments.

We work with organizations around the world, ranging from high-growth technology companies and unicorn startups to large international enterprises.

Our approach focuses heavily on manual penetration testing, real-world exploitation, business logic vulnerabilities, and attack paths that automated security tools often fail to identify.

If you enjoy breaking complex applications, understanding how systems really work, and finding vulnerabilities that require creativity rather than simply running scanners, we would love to hear from you.