Penetration Tester, Web/Mobile Apps and Cloud Services

📋 Job Overview

TP-Link Systems Inc. is seeking a skilled and proactive Penetration Tester, Web/Mobile Apps and Cloud Services to support our cloud service projects under the guidance of senior team members. This role is designed for candidates with a foundational technical background in cybersecurity, particularly in cloud environments. Under the mentorship of senior engineers, the successful candidate will be involved in a range of security activities for specific cloud service components, including penetration testing, threat modeling and security assessment for defined modules, contributing to investigation, risk assessment and verification for incident response.

🏢 About TP-Link Systems Inc.

Headquartered in the United States, TP-Link Systems Inc. is a global provider of reliable networking devices and smart home products, consistently ranked as the world’s top provider of Wi-Fi devices. The company is committed to delivering innovative products that enhance people’s lives through faster, more reliable connectivity. With a commitment to excellence, TP-Link Systems serves customers in over 170 countries and continues to grow its global footprint.

🎯 The Role

The ideal candidate is eager to learn, capable of working within defined boundaries, and driven to enhance the security of TP-Link's cloud services while developing deeper expertise in cloud security practices.

✅ Key Responsibilities

• Penetration Testing: Perform penetration testing on cloud services, web applications, and APIs to identify vulnerabilities. Provide remediation recommendations and write detailed penetration test reports.
• Threat Modelling and security assessment: Perform threat modeling to identify and evaluate potential risks for specific cloud components and web applications.
• Incident Response and Vulnerability Management: Support cloud and web application incident response, including investigation, containment, remediation, and post-incident analysis. Coordinate with cross-functional teams to ensure effective resolution.
• Cloud security configuration: Analyze cloud security configurations and identify misconfigurations that could lead to vulnerabilities.
• Develop security tools: Assist in developing various pen-testing tools, automated testing platforms, and scripts to enhance testing efficiency and accuracy for cloud environments.
• CI/CD Security Integration: Participate in the development and improvement of the company's CI/CD security processes, ensuring security considerations are integrated throughout the development lifecycle.
• Interpret cloud security standards and regulatory requirements, supporting implementation of security requirements.

📌 Required Qualifications

• Bachelor's degree in Computer Science, Information Security, or a related field (or equivalent work experience).
• Proven 1-3 years experience as a Security Engineer (Cloud & Web) or in a similar role.
• Strong knowledge of web application security, cloud security concepts, API security, and common vulnerabilities (OWASP Top 10).
• Experience with security tools such as Burp Suite, OWASP ZAP, Nmap, Kali, Nessus, Metasploit, etc.
• Capability to optimize penetration testing tools and automation strategies for cloud environments.
• Ability to analyze SAST results and identify false positives.
• Proficient in at least one programming language (e.g., Python, JavaScript, Bash, or PowerShell).
• Familiarity with major cloud platforms (AWS, Azure, GCP) and their security controls.

⭐ Desirable Experience

• Relevant security certifications (e.g., CEH, OSWP, etc.) are highly preferred.
• Published CVEs are highly preferred.

🎁 Benefits

Salary range: $80,000-$132,000
Fully paid medical, dental, and vision insurance (partial premium coverage for dependents)
Employer quarterly contributions to 401k funds
15 days accrued vacation
11 paid holidays
Bi-annual reviews, and annual pay increases
Health and wellness benefits, including free gym membership
Quarterly team-building event

🛂 Visa & Eligibility

We are unable to offer visa sponsorship