Advance Your Career as a Senior Penetration Tester at Heirs Insurance Ltd

Are you a seasoned cybersecurity professional with a passion for offensive security and a desire to protect critical financial infrastructure? Heirs Insurance Ltd is seeking a highly skilled Senior Penetration Tester to join our team. We are redefining the insurance landscape through digital innovation, and we need your expertise to ensure our platforms remain resilient against evolving threats.

About the Role

In this role, you will be at the forefront of our defense strategy, leading offensive security testing across our cloud-hosted digital banking platform. You will not just be running automated scans; you will be deep-diving into our cloud infrastructure, Kubernetes environments, backend services, and CI/CD pipelines to identify and validate complex security vulnerabilities.

Key Responsibilities

Plan and execute comprehensive penetration tests across complex network and cloud environments.
Perform deep assessments of AWS architectures, Kubernetes clusters, and API security.
Evaluate software supply chain security, CI/CD pipelines, and infrastructure-as-code.
Conduct lateral movement exercises and assumed-breach scenarios to stress-test our defenses.
Translate complex technical findings into actionable reports for both engineering teams and executive leadership.

Required Qualifications

We are looking for candidates who possess a deep technical foundation:

Experience: At least 5 years in penetration testing, with 3+ years specifically focused on AWS, Kubernetes, and CI/CD security.
Technical Mastery: Proficiency with industry-standard tools such as Burp Suite, Nmap, Metasploit, and Kubernetes tooling (kubectl). You should be comfortable scripting in Python or Go.
Certifications: An OSCP certification is mandatory. Preference will be given to those holding OSEP, AWS Certified Security, or CKS certifications.
Soft Skills: The ability to communicate high-risk vulnerabilities clearly to stakeholders is essential.

Joining Heirs Insurance means working in a fast-paced environment where your findings directly impact the security posture of our digital products. We offer a culture that values professional growth, continuous learning, and technical excellence.