Penetration Tester (Ethical Hacker)

Job Description

IBM is seeking a skilled Penetration Tester (Ethical Hacker) to identify and assess security vulnerabilities across applications, networks, cloud environments, and enterprise systems. The ideal candidate will simulate real-world cyberattacks to uncover weaknesses before malicious actors can exploit them.

As a Penetration Tester, you will work closely with security teams, developers, and IT administrators to conduct security assessments, provide remediation recommendations, and strengthen overall cybersecurity defenses. This role requires strong technical expertise in ethical hacking, vulnerability assessment, and security testing methodologies.

Key Responsibilities

✔ Perform web application, network, and infrastructure penetration testing to identify security vulnerabilities.

✔ Conduct vulnerability assessments using automated and manual security testing techniques.

✔ Simulate cyberattacks to evaluate system security and exploit weaknesses ethically.

✔ Test security controls, authentication mechanisms, and access management systems.

✔ Perform cloud security assessments for AWS, Azure, and Google Cloud environments.

✔ Analyze source code and application security flaws (OWASP Top 10).

✔ Prepare detailed penetration testing reports with risk ratings and remediation recommendations.

✔ Collaborate with development and IT teams to resolve identified vulnerabilities.

✔ Support compliance requirements such as PCI-DSS, ISO 27001, HIPAA, and SOC 2.

✔ Stay updated on emerging cyber threats, hacking techniques, and security tools.

Required Skills & Qualifications

✔ Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or related field

✔ 3–5 years of experience in penetration testing or ethical hacking

✔ Strong knowledge of network security, web application security, and system vulnerabilities

✔ Experience with security tools such as Burp Suite, Metasploit, Nmap, Wireshark, Nessus, and Kali Linux

✔ Familiarity with OWASP Top 10 and secure coding practices

✔ Knowledge of Linux, Windows, and cloud security environments

✔ Programming/Scripting experience in Python, Bash, PowerShell, or JavaScript

✔ Strong analytical and problem-solving skills

Preferred Certifications

✔ CEH (Certified Ethical Hacker)
✔ OSCP (Offensive Security Certified Professional)
✔ CompTIA Security+
✔ CISSP (Preferred)

Benefits

✔ Competitive Salary
✔ Health, Dental & Vision Insurance
✔ Remote/Hybrid Work Opportunities
✔ Performance Bonuses
✔ Paid Time Off
✔ Professional Development & Certification Support
✔ 401(k) Retirement Plan