Ethical Hacker

About this role

Proforce Intelligence Systems is looking for a skilled penetration tester to proactively identify and exploit security vulnerabilities through automated and manual testing, including custom script work. The role involves simulating real-world attacks, producing clear reports, and staying informed about current threats and tools. You will work within a fast-paced security team, collaborating with developers and stakeholders to guide remediation. The position is based in Ode-Remo, Ogun and requires ethical, standards-compliant testing across web, mobile, and API environments. Applicants should have a strong background in offensive security, bug bounty or CTF experience, and relevant certifications are an advantage.

What you would do

• Document proof-of-concept exploits and provide risk-ranked findings
• Perform social engineering and phishing simulation campaigns
• Develop and execute custom exploits where necessary
• Conduct manual application and API penetration testing based on OWASP Top 10 (Mobile, Web, API)
• Stay current on CVEs, exploits, hacker tools, and threat actor techniques
• Provide weekly updates and debriefs with stakeholders
• Analyze security findings from Hacker One and recreate vulnerabilities
• Collaborate with developers and product teams to provide remediation guidance
• Conduct red team exercises simulating advanced persistent threats (APT)
• Conduct black-box, gray-box, and white-box penetration tests on the organization’s Web apps, Mobile apps, and APIs

What they are asking for

• Bachelor’s Degree in a relevant discipline
• Ability to write and explain exploits or security PoCs clearly
• Strong understanding of web technologies, cloud platforms, and modern infrastructure
• Proven experience in offensive security or ethical hacking
• Demonstrated history with bug bounty programs or CTF competitions
• Knowledge of tools and platforms listed (at least one in each category) such as CIS Benchmarks, Postman, NIST 800-53 / ISO 27001, OWASP Top 10, Kali Linux, Burp Suite, ZAP, Nmap, MobSF, Frida, JADX, Objection, Android Studio
• Preferred qualifications: experience in CI/CD and DevSecOps, programming/scripting (Python, JavaScript, Node.js, PHP, Go, Bash)
• Certifications such as CEH, OSCP, OSCE, GPEN or similar are an advantage

Listing details are summarised from the source. Always confirm the role and the employer on the original posting before applying, and never pay to apply for a job.