ODI Technologies
About The Role We are seeking a detail-oriented Penetration Tester with a broad Security Specialist scope to strengthen our application, infrastructure, and system security. In this role, you will be responsible for executing hands-on penetration tests, conducting deep-dive system architecture audits, and ensuring robust security protocols around encrypted logins and sensitive client data. This position combines active ethical hacking with broad security oversight, suitable for an experienced Penetration Tester, Security Specialist, or a QA Engineer with dedicated penetration testing expertise. Key Responsibilities 1. Penetration Testing & Vulnerability Assessment Plan, execute, and document regular penetration testing across web applications, APIs, mobile platforms, and cloud infrastructure. Identify, exploit, and document security vulnerabilities prior to production releases. Conduct security QA testing to validate bug fixes, regression prevention, and vulnerability remediations. 2. System Architecture & Security Auditing Audit system architecture, network topologies, and data flows to ensure alignment with security best practices. Evaluate system design to ensure absolute confidentiality, integrity, and availability of sensitive client data. Review infrastructure components to identify potential attack vectors and misconfigurations. 3. Access Control & Encryption Management Manage, audit, and validate encrypted login protocols, multi-factor authentication (MFA), and single sign-on (SSO) systems. Ensure end-to-end encryption standards (at rest and in transit) across all application layers and databases. Manage credential security, token handling (JWT, OAuth), and role-based access control (RBAC) mechanisms. 4. Reporting & Security Strategy Produce clear, actionable penetration test and security audit reports detailing risk severity, exploitation context, and technical recommendations. Collaborate closely with engineering and DevOps teams to remediate identified security risks. Requirements & Qualifications Strong experience as a Penetration Tester, Security Specialist, or Security-focused QA Engineer. Hands-on proficiency with penetration testing tools (e.g., Burp Suite, OWASP ZAP, Metasploit, Nmap, SQLmap, Wireshark). Deep understanding of OWASP Top 10 vulnerabilities, web application security, and secure coding practices. Proven knowledge of system architecture auditing, threat modeling, and infrastructure security principles. Practical expertise in cryptography standards, secure authentication mechanisms, and session management. Industry certifications such as OSCP, CEH, CISSP, CompTIA Security+ , or equivalent hands-on experience are highly desirable. Strong written and verbal communication skills to present technical security findings clearly. Benefits Flexible remote work setup. Competitive compensation package. Opportunity to lead security initiatives across modern, cloud-based applications. Benefits Additional leave Company Christmas gift Company events Flexible schedule Flextime Opportunities for promotion Work from home Application Question(s): How many years of hands-on experience do you have performing penetration testing across web applications, APIs, and infrastructure? Which penetration testing and vulnerability scanning tools (e.g., Burp Suite, Metasploit, OWASP ZAP, Nmap) do you use most proficiently in your daily workflow? Have you audited system architectures specifically for encrypted login protocols, authentication mechanisms (OAuth/JWT), and sensitive data protection? Please briefly describe a recent example. Do you hold any security certifications (such as OSCP, CEH, CISSP, CompTIA Security+), or equivalent formal security training? This is a full-time remote role. What is your current availability/notice period? Work Location: Remote
ODI Technologies
