Haken Penetration Tester - Cybersecurity Specialist | Tokyo

Join a specialised global cybersecurity consultancy in Tokyo as a Penetration Tester / Cybersecurity Specialist, conducting advanced security assessments and ethical hacking engagements for major enterprise clients.

In this high-paying contract position, you will identify vulnerabilities across web applications, mobile applications and network infrastructure, helping organisations strengthen their security posture and protect critical digital assets.

You will perform penetration testing, vulnerability assessments, static and dynamic code analysis, and threat modelling, using industry-standard security testing tools to uncover weaknesses and evaluate potential business risks.

Working with enterprise clients, technical security teams and executive stakeholders, you will translate complex security findings into practical remediation recommendations and clear risk assessments.

The role offers access to advanced security testing laboratories, sandbox environments and research resources, alongside opportunities to collaborate with experienced offensive security practitioners.

This opportunity is ideal for an experienced Penetration Tester, Ethical Hacker, Offensive Security Engineer or Cybersecurity Consultant seeking a flexible contract role in Tokyo with exposure to complex enterprise security environments.

Key Responsibilities

• Conduct web application penetration testing to identify security vulnerabilities, application weaknesses and potential attack paths.
• Perform mobile application security assessments to evaluate vulnerabilities and risks affecting enterprise mobile platforms.
• Execute network penetration testing to assess infrastructure security and identify exploitable weaknesses.
• Conduct vulnerability scanning and security risk assessments across client technology environments.
• Perform static application security testing (SAST) and dynamic application security testing (DAST) to identify software security weaknesses.
• Develop and apply threat models to assess potential attack scenarios and prioritise security risks.
• Use tools such as Burp Suite, Metasploit, Nmap and Wireshark to support authorised security testing and technical analysis.
• Prepare detailed penetration testing reports, vulnerability findings and remediation recommendations for technical teams and executive stakeholders.
• Present complex security findings in clear business terms, helping senior leaders understand potential operational and financial risks.
• Collaborate with cybersecurity consultants and client stakeholders to support effective vulnerability remediation and continuous security improvement.

Required Skills and Qualifications

Experience:

• 3+ years of dedicated professional experience in penetration testing, offensive security or ethical hacking.
• Hands-on experience conducting web application, mobile application and network penetration tests.
• Strong understanding of vulnerability assessment, security risk analysis and threat modelling.
• Practical experience with static and dynamic code analysis (SAST/DAST).
• Proficiency using Burp Suite, Metasploit, Nmap and Wireshark for security testing and investigation.
• Experience identifying, validating and documenting security vulnerabilities and potential attack vectors.
• Ability to prepare detailed technical reports and actionable vulnerability remediation recommendations.
• Experience conducting security assessments in professional or enterprise technology environments.

Soft Skills:

• Excellent ability to translate complex security vulnerabilities and exploit scenarios into clear business risk explanations for executive stakeholders.
• High standards of professional integrity, confidentiality and ethical conduct when handling sensitive security information.
• Strong analytical thinking and systematic problem-solving skills.
• Curious, research-driven mindset with a commitment to continuous learning about emerging threats and zero-day vulnerabilities.
• Clear communication skills for presenting technical findings to both technical and non-technical audiences.
• Self-motivated approach to managing independent security testing engagements and project deadlines.

Language Requirements:

• Japanese: Conversational level for communication with local clients and stakeholders.
• English: Fluent level for technical reporting, security discussions and collaboration with international teams.

Preferred Skills & Qualifications

• OSCP (Offensive Security Certified Professional), CEH (Certified Ethical Hacker) or CISSP (Certified Information Systems Security Professional) certification.
• Experience conducting enterprise penetration testing engagements for financial institutions or technology companies.
• Advanced knowledge of web application security, mobile security and network exploitation techniques.
• Familiarity with emerging attack methods, zero-day vulnerabilities and modern threat research.
• Experience presenting penetration testing findings and remediation priorities to senior management or executive stakeholders.
• Experience working within a specialised cybersecurity consultancy or offensive security assessment team.

About the Company

Our client is a specialised global cybersecurity consultancy trusted by major financial institutions and technology companies to protect critical digital assets and strengthen enterprise security.

The organisation delivers advanced security assessment and offensive security services, helping clients identify vulnerabilities, understand cyber risks and implement effective remediation strategies.

With access to sophisticated security evaluation tools, dedicated testing environments and research resources, the company supports technically demanding cybersecurity engagements.

Its team includes experienced offensive security specialists and penetration testing professionals, providing opportunities to exchange knowledge and develop expertise in modern cybersecurity techniques.

Why You'll Love Working Here

• Earn a premium contract rate of ¥5,000-¥6,000 per hour.
• Work on advanced penetration testing and ethical hacking engagements for major enterprise clients.
• Enjoy high remote-work flexibility and the ability to manage project schedules independently.
• Gain access to cutting-edge cybersecurity testing tools, advanced laboratories and sandbox environments.
• Benefit from research budgets and resources supporting technical investigation and professional development.
• Collaborate with leading offensive security practitioners in the region.
• Build specialist expertise in web application security, mobile penetration testing and network security assessments.
• Work with clients in the financial services and technology sectors, gaining exposure to complex security challenges.
• Develop valuable experience translating technical vulnerabilities into business-focused risk and remediation recommendations.
• Strengthen your professional profile through challenging, high-impact cybersecurity consulting projects.

Don't Miss Out - Apply Now!