Senior Penetration Tester

Overview of the Senior Penetration Tester Role at NTT DATA

NTT DATA is actively expanding its internal cybersecurity capabilities and is looking for a Senior Penetration Tester to join the Office of Information Security, a vital part of their Global Functions team. This role, based in Romania, is integral to the Attack & Hunt team, focusing on proactive vulnerability identification, simulating real-world attack scenarios, and supporting threat detection and response. The Senior Penetration Tester will be crucial in fortifying NTT DATA's internal security posture by employing advanced tools, techniques, and methodologies to assess and enhance the resilience of enterprise systems and infrastructure.

Key Responsibilities

• Perform comprehensive network penetration, web application testing, source code reviews, threat analysis, and social-engineering assessments.
• Develop custom scripts, tools, or methodologies to significantly enhance NTT DATA, Inc's Purple Team and Security Operations capabilities.
• Actively monitor open-source intelligence feeds for any information relevant to NTT DATA.
• Develop detailed threat models to identify potential risks.
• Thoroughly document all techniques, tactics, and proofs of concept utilized during security testing and red team exercises.
• Produce comprehensive and accurate reports and presentations tailored for both technical and executive audiences.

Basic Qualifications

• 5+ years of hands-on experience in penetration testing across various domains including web applications, APIs, containers, networks, operating systems, databases, and cloud platforms.
• Demonstrated strong experience in technical writing and the production of detailed security reports.
• Deep understanding of offensive security operations and secure development practices.
• Familiarity with industry standards and frameworks such as OWASP Top 10, NIST, CIS, MITRE ATT&CK, and various threat actor methodologies.
• Proficiency in scripting languages including Python, PowerShell, Ruby, and Bash.
• Experience with advanced exploit development and evasion techniques.
• Skilled in using penetration testing tools such as Kali, Metasploit, Nessus, Nuclei, Nmap, Burp Suite, PowerSploit, and Impacket.
• Flexible, analytical, and adaptable; while a degree or certifications (OSCP, OSEP, etc.) are preferred, they are not strictly required.

Preferred Skills

• Proven ability to work independently and efficiently manage multiple remote projects.
• Strong collaboration and stakeholder engagement skills.
• A creative thinker with a passion for innovation and continuous learning in the cybersecurity field.
• Skilled in post-compromise techniques and lateral movement strategies.
• Deep understanding of security frameworks like OWASP, PTES, and NIST SP 800-115.
• Proficient in using tools such as Metasploit, Burp Suite, Nmap, and Wireshark.
• Solid knowledge of operating systems, network protocols, and application security.
• Experienced in assessing web applications, databases, and general infrastructure security.
• Excellent analytical, reporting, and communication skills.
• Committed to ethical conduct, confidentiality, and data privacy.

Key skills/competency

• Penetration Testing
• Web Application Security
• Network Security
• Offensive Security
• Exploit Development
• Cloud Security
• Threat Modeling
• Security Reporting
• Python/Scripting
• OWASP/NIST