Ethical Hacker

Summary

OVA.Work is seeking a skilled Ethical Hacker to identify, analyze, and help remediate security vulnerabilities across various environments. The role involves conducting penetration testing, vulnerability assessments, and collaborating with teams to enhance cybersecurity measures.

Responsibilities

• Conduct authorized penetration testing across web applications, mobile applications, APIs, networks, cloud environments, and infrastructure
• Identify, exploit, validate, and document security vulnerabilities using ethical hacking methodologies
• Perform vulnerability assessments, security reviews, and risk analysis
• Execute security testing aligned with industry frameworks such as OWASP, PTES, and NIST guidelines
• Conduct web application security testing including authentication, authorization, injection, session management, and business logic testing
• Perform network security assessments, including configuration reviews and vulnerability analysis
• Analyze security findings and prepare detailed reports with risk ratings and remediation recommendations
• Collaborate with developers, system administrators, and security teams to validate fixes and improve security controls
• Conduct threat research and stay updated on emerging vulnerabilities, exploits, and attack techniques
• Support red team exercises, security audits, and incident response investigations when required
• Maintain documentation of testing methodologies, findings, and security improvements

Skills

• Bachelor's degree in Computer Science, Cybersecurity, Information Security, or a related field (or equivalent practical experience)
• 2–5 years of experience in ethical hacking, penetration testing, vulnerability assessment, or security engineering
• Strong understanding of networking concepts, TCP/IP, DNS, HTTP/HTTPS, VPNs, and firewalls
• Hands-on experience with web application security testing and OWASP Top 10 vulnerabilities
• Proficiency with Linux-based security environments such as Kali Linux or Parrot OS
• Experience using penetration testing and vulnerability assessment tools
• Knowledge of scripting languages such as Python, Bash, or PowerShell
• Strong understanding of security principles, authentication mechanisms, encryption, and access controls
• Experience performing penetration tests for web applications, APIs, mobile applications, and cloud platforms
• Knowledge of cloud security testing for AWS, Azure, or Google Cloud environments
• Familiarity with Active Directory security assessments and enterprise network testing
• Experience with vulnerability management platforms and security reporting tools
• Understanding of malware analysis, exploit development, or reverse engineering concepts
• Experience with bug bounty programs or responsible vulnerability disclosure
• Knowledge of DevSecOps and application security practices

Qualifications

Must Haves

• Bachelor's degree in Computer Science, Cybersecurity, Information Security, or a related field (or equivalent practical experience)
• 2–5 years of experience in ethical hacking, penetration testing, vulnerability assessment, or security engineering
• Strong understanding of networking concepts, TCP/IP, DNS, HTTP/HTTPS, VPNs, and firewalls
• Hands-on experience with web application security testing and OWASP Top 10 vulnerabilities
• Proficiency with Linux-based security environments such as Kali Linux or Parrot OS
• Experience using penetration testing and vulnerability assessment tools
• Knowledge of scripting languages such as Python, Bash, or PowerShell
• Strong understanding of security principles, authentication mechanisms, encryption, and access controls

Nice to Haves

• Experience performing penetration tests for web applications, APIs, mobile applications, and cloud platforms
• Knowledge of cloud security testing for AWS, Azure, or Google Cloud environments
• Familiarity with Active Directory security assessments and enterprise network testing
• Experience with vulnerability management platforms and security reporting tools
• Understanding of malware analysis, exploit development, or reverse engineering concepts
• Experience with bug bounty programs or responsible vulnerability disclosure
• Knowledge of DevSecOps and application security practices

Benefits

• Competitive salary and performance-based incentives.
• Comprehensive health and wellness benefits.
• Flexible or hybrid work arrangements.
• Cybersecurity training, certification, and conference support.
• Opportunity to work on advanced security assessments and real-world cybersecurity challenges.
• Collaborative environment focused on continuous security improvement.