Key Responsibilities
- Plan and execute penetration tests across web applications, APIs, internal networks, cloud infrastructure, and mobile applications
- Simulate real-world attack scenarios including phishing, social engineering, privilege escalation, and lateral movement
- Identify, exploit, and document security vulnerabilities across ZetaBox's systems and products
- Produce detailed, actionable penetration test reports for both technical and non-technical stakeholders
- Work closely with development and DevSecOps teams to validate fixes and retest remediated vulnerabilities
- Conduct red team exercises and adversarial simulations to assess ZetaBox's detection and response capabilities
- Perform threat modeling and security architecture reviews during the SDLC
- Stay current with the latest CVEs, attack techniques, and offensive security research
- Contribute to building internal security tooling, scripts, and automation for recurring assessments
- Support compliance-driven assessments (e.g., ISO 27001, SOC 2, PCI-DSS) where security testing is required