Penetration Tester & Application Security

Job Title: Senior Offensive Security Specialist (Penetration Tester & Application Security)

Location: Lagos, Nigeria

Employment Type: Full-Time

Department: Cybersecurity

Position Summary

We are seeking a seasoned and tactical Offensive Security Specialist to join our elite security team. In this critical role, you will be responsible for simulating sophisticated cyber adversaries to uncover vulnerabilities across our application ecosystem, cloud infrastructure, and internal networks. You will go beyond checklist testing to execute real-world attack simulations, providing deep insights that directly shape our defense strategies and strengthen our overall security resilience.

Key Responsibilities

Advanced Application & Infrastructure Security Testing:

• Lead comprehensive security assessments of web and mobile applications, APIs, microservices, and backend systems using both automated tools and sophisticated manual testing techniques.
• Identify, exploit, and document complex security vulnerabilities, including OWASP Top 10, business logic flaws, and architecture-level weaknesses.
• Conduct secure code reviews and provide actionable, developer-friendly remediation guidance to engineering teams.
• Validate vulnerability fixes and promote the integration of security best practices within the DevOps/CI-CD pipeline.

Red Teaming & Adversary Simulation:

• Plan and execute full-spectrum red team engagements, emulating the Tactics, Techniques, and Procedures (TTPs) of advanced persistent threats (APTs) and cyber-criminal actors.
• Conduct multi-vector operations encompassing social engineering, physical security tests (where applicable), network exploitation, privilege escalation, and lateral movement within on-premise and cloud environments (AWS, Azure, GCP).
• Utilize frameworks like MITRE ATT&CK to map attack paths, document the cyber kill chain, and identify security control gaps and detection failures.

Purple Teaming & Security Control Validation:

• Collaborate directly with Blue Team and SOC analysts in purple team exercises to test and refine detection, response, and mitigation capabilities.
• Perform threat modeling on critical assets and business processes to prioritize offensive security efforts.
• Provide expert-level briefings and comprehensive reports to both technical teams and executive leadership, translating technical findings into business risk.

Required Qualifications & Skills

• Experience: 5+ years of hands-on, professional experience in penetration testing, red teaming, or a related offensive security role.
• Technical Proficiency:
• Expert-level proficiency with industry-standard tools (Burp Suite Pro, Metasploit, Cobalt Strike, Nmap, etc.) and offensive security distributions (Kali Linux).
• Demonstrated experience exploiting vulnerabilities in modern cloud environments (AWS, Azure, GCP) and corporate networks (Active Directory, endpoint security bypass).
• Strong understanding of application security, secure SDLC, API security, and containerized environments.
• Practical scripting/coding ability in Python, PowerShell, or Bash for tool customization and automation.
• Methodical Approach: Deep understanding of adversary methodologies, attack lifecycle, and proven ability to think creatively and strategically to bypass security controls.
• Communication: Exceptional written and verbal communication skills, with the ability to articulate complex technical risks to a variety of audiences, including developers and senior management.

Preferred Qualifications

• Certifications: Offensive security certifications are highly valued (e.g., OSCP, OSWE, OSEP, CRTO, GPEN, GXPN).
• Education: Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or equivalent practical experience.
• Mindset: A continuous learner with a passion for cybersecurity, high ethical standards, and a commitment to professional integrity.

What We Offer

• A challenging role at the forefront of cybersecurity with tangible impact.
• Opportunities for professional growth and certification support.
• A collaborative environment with a team of dedicated security experts.
• Competitive compensation and benefits package.

If interested, send CV to favour@ascentech.com.ng

<