Penetration Tester

About Onetela

Onetela provides advanced security solutions that enhance trust across digital and physical domains. Their integrated platform combines identity verification, KYC, AML compliance, smart surveillance, person and object detection, and cybersecurity measures to protect organizations from fraud and strengthen security protocols. Serving sectors such as financial services, government, healthcare, education, telecommunications, and enterprise, Onetela enables accurate verifications and advanced threat detection to facilitate secure and trusted interactions.

Role Overview

The Penetration Tester is tasked with conducting thorough security evaluations on applications, systems, and network infrastructures to uncover vulnerabilities and verify existing security measures. Responsibilities include planning and executing penetration tests, documenting outcomes, and delivering clear guidance for remediation to technical teams and stakeholders with varying levels of technical expertise. Collaboration with cybersecurity, engineering, and compliance groups is essential to enhance Onetela’s platform and clients’ security postures.

Responsibilities

• Design and perform penetration tests on diverse applications, infrastructures, and systems.
• Document security assessment findings and offer actionable remediation advice.
• Collaborate with cross-functional teams to improve security controls and platform resilience.
• Stay informed on the latest threats, hacking techniques, and security tools.
• Participate in red team exercises to simulate attack scenarios.
• Support incident response efforts as required.
• Engage in secure design reviews to influence product security from inception.

Requirements

• Solid knowledge of cybersecurity principles, including vulnerability assessments, threat modeling, and network security design.
• Experience in application security testing covering web, mobile, and API domains; familiarity with OWASP and common vulnerabilities.
• Competence in reverse engineering and malware analysis to evaluate exploit techniques and software robustness.
• Hands-on experience with offensive security practices, red teaming, and penetration testing frameworks.
• Proficiency with key penetration testing tools such as Burp Suite, Nmap, Metasploit, Wireshark, and scripting languages like Python, Bash, and PowerShell.
• Strong communication skills to produce comprehensive reports and convey technical findings effectively to diverse audiences.
• Relevant certifications (e.g., OSCP, OSCE, GPEN, CEH) are advantageous.
• Bachelor's degree in Computer Science, Information Security, or related disciplines, or equivalent hands-on experience.
• Exposure to regulated sectors such as financial services, government, or healthcare is a plus.