Penetration Tester

About the role

Ekco is seeking a skilled Penetration Tester to join its security consulting team. This hybrid position involves performing security assessments for client applications, infrastructure, APIs, cloud platforms and endpoints, both on‑site and remotely.

Key responsibilities

• Conduct comprehensive penetration tests across web, thick‑client, infrastructure, API and cloud environments.
• Perform testing on‑site at client locations as well as remotely, according to project needs.
• Develop and execute customized test plans, methodologies and tools, adhering to standards such as OWASP and NIST.
• Analyse system architectures to uncover security flaws and provide strategic mitigation recommendations.
• Collaborate closely with clients and their development teams to understand architecture and codebases.

Required profile

• Strong knowledge of application security and penetration‑testing methodologies.
• Experience with industry best practices and standards (e.g., OWASP, NIST).
• Ability to work independently and as part of a hybrid team, including travel to client sites.
• Excellent analytical and communication skills for reporting findings.

Required skills

• Penetration testing
• OWASP
• NIST
• Web application security
• API security
• Cloud platform security