Penetration Tester

Company Description Onetela helps organizations build trust across both digital and physical environments. The company’s platform integrates identity verification, KYC, AML, smart surveillance, person and object detection, and cybersecurity to strengthen compliance, improve security, and reduce fraud. Onetela serves financial services, government, healthcare, education, telecommunications, and enterprise organizations that require secure, scalable solutions. By enabling accurate verification and advanced threat detection, Onetela supports confident decisions and trusted interactions. Team members contribute to technology that directly impacts safety, integrity, and trust in critical industries.
Role Description The Penetration Tester will perform security assessments on applications, systems, and infrastructure to identify vulnerabilities and validate security controls. Day-to-day responsibilities include planning and executing penetration tests, documenting findings, and providing clear remediation recommendations to technical and non-technical stakeholders. The role involves collaborating with cybersecurity, engineering, and compliance teams to help improve Onetela’s platform and customer environments, as well as staying current with emerging threats, tools, and exploit techniques. The Penetration Tester will also participate in red team exercises, support incident response when needed, and contribute to secure design reviews. This is a full-time, remote role.
Qualifications

• Strong cybersecurity fundamentals, including vulnerability assessment, threat modeling, and secure network architectures.
• Experience with application security, including web, mobile, and API testing, and familiarity with common vulnerabilities and frameworks (e.g., OWASP).
• Skills in reverse engineering and malware analysis to understand exploit behavior and assess software resilience.
• Hands-on experience with red teaming, offensive security methodologies, and penetration testing tools and frameworks.
• Proficiency with common penetration testing tools (e.g., Burp Suite, Nmap, Metasploit, Wireshark) and scripting languages (e.g., Python, Bash, PowerShell).
• Ability to produce clear, structured reports and communicate technical findings to diverse audiences.
• Relevant certifications such as OSCP, OSCE, GPEN, or CEH are beneficial.
• Bachelor’s degree in Computer Science, Information Security, or related field, or equivalent practical experience.
• Experience working in or with regulated industries (financial services, government, healthcare) is a plus.