Senior Penetration Tester (Offensive Security)

About the role

GV Alliance Partners Limited is seeking a senior‑level Penetration Tester to strengthen the security of its web, mobile and API assets. You will work closely with development, AppSec, DevOps and product teams to identify vulnerabilities and guide remediation. This role requires staying ahead of emerging threats and delivering clear, actionable findings.

Key responsibilities

• Perform black‑box, gray‑box and white‑box penetration tests on web applications, mobile applications and APIs.
• Design and execute social engineering and phishing simulation campaigns.
• Develop custom exploits and proof‑of‑concept code when required.
• Document findings, rank risks and provide remediation guidance.
• Lead red‑team exercises simulating advanced persistent threats (APT).
• Analyse security reports from HackerOne and recreate reported vulnerabilities.
• Provide weekly updates and debriefs to stakeholders.

Required profile

• Minimum 5 years of offensive security or ethical hacking experience.
• Proven track record in bug bounty programs or CTF competitions.
• Strong understanding of web technologies, cloud platforms and modern infrastructure.
• Excellent written communication and report‑writing skills.

Required skills

• Burp Suite
• OWASP ZAP
• Nmap
• MobSF, Frida, jadx, Objection, Android Studio
• Kali Linux, Parrot OS
• Python, Bash, PowerShell scripting
• Postman for API testing
• OWASP Top 10 (Web, API, Mobile)
• CIS Benchmarks, NIST 800‑53, ISO/IEC 27001
• CI/CD and DevSecOps environments

What we offer

• Competitive salary between 400,000 NGN and 600,000 NGN per month.