Penetration Tester

Company Description Coresec helps organizations prevent security breaches by providing vulnerability assessment and penetration testing (VAPT), security operations center (SOC) monitoring, incident response, and compliance readiness services. The company emphasizes delivering practical, actionable fixes rather than only producing reports, enabling clients to strengthen their security posture effectively. Coresec collaborates closely with organizations to identify risks, contain threats, and maintain resilient systems. Team members work in a focused cybersecurity environment that values technical excellence, continuous learning, and real-world impact.
Role Description This is a full-time, on-site Penetration Tester role based in Chattogram, Bangladesh. The Penetration Tester will perform hands-on security assessments of web, mobile, and infrastructure systems, identify vulnerabilities, and validate exploitability through controlled attacks. Daily responsibilities include planning and executing penetration tests, documenting findings, producing clear technical and non-technical reports, and presenting remediation guidance to clients and internal stakeholders. The role also involves collaborating with incident response and SOC teams, participating in red team exercises, and staying current on emerging threats, tools, and techniques. The Penetration Tester will contribute to improving internal methodologies, automating testing workflows, and supporting compliance-related assessments as needed.
Qualifications

• Candidates should possess strong Application Security skills, including secure coding concepts, vulnerability identification, and exploitation of web and mobile applications.
• Candidates should possess Cybersecurity skills related to network security, operating system hardening, threat modeling, and common security frameworks.
• Candidates should possess Reverse Engineering skills, including analysis of binaries, understanding program behavior, and identifying security weaknesses.
• Candidates should possess Malware Analysis skills, including static and dynamic analysis, sandboxing techniques, and detection of malicious behavior.
• Candidates should possess Red Teaming skills, including adversary simulation, lateral movement, and multi-stage attack scenarios.
• Experience with common penetration testing tools (e.g., Burp Suite, Nmap, Metasploit, Wireshark) and scripting languages such as Python or Bash.
• Ability to produce clear, structured reports and communicate findings to technical and non-technical audiences.
• Strong analytical thinking, attention to detail, and commitment to ethical hacking and responsible disclosure practices.
• Bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent practical experience.
• Relevant certifications (e.g., OSCP, OSCE, CEH, GPEN) are beneficial but not mandatory.