Growth in Value Alliance (GV Alliance) Partners is a business advisory and market intelligence services firm. Our objectives are to assist organizations to achieve their growth aspirations by providing market intelligence, strategy formulation and implementation expertise and business operation improvement skills.
We are recruiting to fill the position below:
Job Title: Penetration Tester: Ethical Hacker CEH, OSCP, OSCE, GPEN
Location: Lagos
Employment Type: Full-time FindRecruiters
Job Summary
We are seeking a skilled and driven penetration tester with a hacker mindset to proactively simulate real-world attacks to identify, assess, and exploit security vulnerabilities.
You’ll be part of a fast-paced security team, expected to think like an adversary while maintaining ethical standards and compliance.
You must be capable of both automated and manual testing, custom script writing, and producing detailed yet understandable reports.
Key ResponsibilitiesConduct black-box, gray-box, and white-box penetration tests on: Web apps, Mobile apps, APIs.
Perform social engineering and phishing simulation campaigns.
Develop and execute custom exploits where necessary.
Document proof-of-concept exploits and provide risk-ranked findings.
Conduct red team exercises simulating advanced persistent threats (APT).
Analyze security findings from Hacker One and recreate vulnerabilities.
Collaborate with developers, Appsec Team, DevOps, and product teams to provide remediation guidance.
Stay current on CVEs, exploits, hacker tools, and threat actor techniques (TTPs).
Weekly updates and debriefs with stakeholders.
Manual Application and Api Penetration testing based on Owasp top 10 (Mobile,Web,Api).
Minimum Requirements
Bachelor's Degree with 5 years of experience.
Proven experience in offensive security or ethical hacking.
Demonstrated history with Bug Bounty programs or CTF competitions.
Deep understanding of web technologies, cloud platforms, and modern infrastructure.
Ability to write and explain exploits or security PoCs clearly.
Strong report writing and communication skills.
Tools and Platforms (it’s expected to have knowledge of how to use at least one of each of the listed tools):
Burp Suite, OWASP ZAP, Nmap.
Mobile security tools: MobSF, Frida, jadx, Objection, genny motion, Andriod studio.
Kali Linux, Parrot OS, custom scripts in Python, Bash, PowerShell.
Postman, for API testing.
Security Standards & Compliance:OWASP Top 10 (Web, API, Mobile).
CIS Benchmarks.
NIST 800-53, ISO/IEC 27001.
Preferred Qualifications:CEH, OSCP, OSCE, GPEN, or similar certifications.
Experience working in CI/CD environments and with DevSecOps teams.
Programming or scripting experience (Python, JavaScript, Nodejs, php, Go, Bash).
Application Closing Date23rd October, 2026.
How to Apply
Interested and qualified candidates should send their CV in PDF to: [Email hidden - Login to reveal] and copy [Email hidden - Login to reveal] using the Job Title as the subject of the email. BrowseCareers
How To Apply
-
Make sure you are logged in and your email is verified (Register if you dont have an account).
-
Click the Apply Now button above.
-
Your default email application or the application link will open.
-
Attach your Application letter, updated Curriculum Vitae (CV) and any supporting documents required.
-
Use a professional subject line such as Application for "Indicate Position"
-
Make sure to send your application before the closing date.
Note: Only shortlisted candidates are contacted.
