Job Summary: We are seeking a Penetration Tester with experience in offensive cybersecurity to assess and strengthen the security of clients' systems, networks, and applications. Key Highlights: 1. Key role in offensive cybersecurity and penetration testing 2. Identification and exploitation of security vulnerabilities 3. Continuous updating on cybersecurity techniques and tools We are looking for a Penetration Tester with a minimum of 2 years’ experience in offensive cybersecurity or penetration testing roles, residing in Bogotá, to evaluate the security of clients' systems, networks, and applications through controlled penetration tests, identifying vulnerabilities and proposing improvements that reduce risks and strengthen the cybersecurity posture. Requirements: * Professional degree in Systems Engineering, Cybersecurity Engineering, or related fields. * Minimum 2 years’ experience performing pentesting or offensive security functions, preferably in client-facing environments. Required Technical Knowledge: * Intermediate knowledge of Linux. * Proficiency with pentesting tools such as: * Nmap * Metasploit * Burp Suite * OpenVAS * Knowledge of networking, firewalls (FW), and Web Application Firewalls (WAF). * Execution of penetration tests on systems, networks, and applications. * Identification, exploitation, and validation of security vulnerabilities. * Preparation of technical reports with evidence and recommendations. * Presentation of results to technical teams and stakeholders. * Continuous updating on offensive cybersecurity techniques, tools, and trends. We Offer: * Direct employment contract with the company. * Working hours: Monday to Friday, 7:45 a.m. to 5:30 p.m. * Work model: Hybrid. * Salary: 3\.000\.000 to 3\.500\.000 Employment Type: Full-time Application Question(s): * How many years of experience do you have conducting penetration tests or offensive security activities? * Have you performed pentesting for external clients (consulting, managed services, projects)? * Which of the following tools have you used practically in real-world projects? Please indicate all applicable ones: Nmap, Metasploit, Burp Suite, OpenVAS