Penetration Tester

Company Description

CT Defense
offers expert cybersecurity services to protect businesses, guaranteeing security while helping them stay competitive in a constantly evolving digital landscape.

Role Description

We are seeking a highly skilled Penetration Tester to join our cybersecurity team in the Cluj-Napoca, Romania. In this role, you will perform comprehensive security assessments to uncover vulnerabilities across networks, applications, and systems. Your work will directly strengthen cyber security posture and help safeguard critical assets.

Your responsibilities will include:

• Vulnerability Assessments & Penetration Testing – Conduct thorough testing of web, mobile, and infrastructure environments to identify potential weaknesses.
• Application Security Assessments – Evaluate application code, architecture, and configurations to identify and mitigate security risks.
• Red Teaming Exercises – Simulate real-world attack scenarios to assess the effectiveness of security controls and incident response.
• Incident Response, Reverse Engineering, Malware Analysis – Coordinate incident response, analyze different logs sources, deconstruct and analyze malicious code, assess its impact, and propose countermeasures.
• Reporting & Recommendations – Document findings in detailed, actionable reports, outlining remediation steps and risk prioritization.
• Collaboration – Work closely with internal security engineers, developers, and system administrators to improve overall security defenses.

Qualifications & Skills

• Proven experience in penetration testing, application security and red teaming activities
• Strong understanding of cybersecurity principles, threat landscapes, and attack vectors
• Proficiency with penetration testing tools (e.g., Burp Suite, Metasploit, Nmap, Wireshark, IDA Pro, Ghidra)
• Strong analytical thinking and problem-solving abilities
• Bachelor's degree in Computer Science, Information Security, or a related discipline (or equivalent practical experience)
• Preferred certifications: OSCP, CREST, CEH, CISSP, or other relevant industry credentials
• Expertise in reverse engineering and malware analysis

If this seems like an opportunity for you, please feel free to apply.