Senior Penetration Tester for Secure SDLC Setup

Keystone Digital

Contract · Remote · Flexible hours

About the role

Keystone Digital is revamping its legacy production platform, codenamed "PulseCore", to achieve true zero‑downtime deployments. As a Senior Penetration Tester you will safeguard the modernization effort by identifying and exploiting vulnerabilities before they reach production. Your work will directly influence the security posture of the new continuous‑delivery pipeline.

Key responsibilities

• Conduct black‑box and white‑box penetration tests on the PulseCore microservices using Burp Suite and Metasploit.
• Develop custom Python scripts to automate exploitation of identified flaws in containerized environments.
• Perform network segmentation testing across the hybrid cloud infrastructure, focusing on zero‑trust controls.
• Collaborate with DevSecOps engineers to integrate findings into CI/CD pipelines for automated remediation.
• Deliver a comprehensive vulnerability report with risk ratings and remediation timelines aligned with the two‑week sprint cadence.

Must-have skills

• Extensive experience in penetration testing of web applications and APIs.
• Proficiency with Kali Linux tooling, including Nmap, Wireshark, and OWASP ZAP.
• Strong scripting abilities in Python for exploit development and data parsing.
• Deep understanding of cloud security concepts, especially AWS and container orchestration.

Nice to have

• Certifications such as OSCP or GPEN.
• Experience with threat modeling frameworks like STRIDE.