Senior Penetration Tester – Access Control Design

CloudWave Digital

Contract · Flexible hours

About the role

CloudWave Digital seeks a senior Penetration Tester to assess the security of a new SaaS platform before launch. The project focuses on identifying vulnerabilities across web applications, APIs, and underlying cloud infrastructure. You will work closely with the development team to prioritize findings and recommend remediation.

Key responsibilities

• Perform comprehensive black‑box and white‑box penetration tests on web services and APIs.
• Analyze cloud configurations and identify misconfigurations in AWS/Azure environments.
• Develop detailed vulnerability reports with risk ratings and actionable remediation steps.
• Collaborate with developers to validate fixes and retest resolved issues.
• Maintain testing scripts and tools, ensuring they are up‑to‑date with the latest attack techniques.
• Provide concise executive summaries for non‑technical stakeholders.

Must-have skills

• 10+ years of hands‑on penetration testing experience.
• Deep knowledge of OWASP Top 10, network protocols, and cloud security controls.
• Proficiency in scripting languages such as Python for automation.
• Strong Linux administration and command‑line expertise.
• Experience with industry‑standard tools (Burp Suite, Metasploit, Nmap, etc.).

Nice to have

• Certifications such as OSCP, OSCE, or CISSP.
• Familiarity with DevSecOps pipelines and CI/CD integration.