Senior Penetration Tester

View full description

Requirements:

• Minimum seven or more years of hands-on penetration testing experience.
• Five or more years of hands-on web application penetration testing experience.
• Experience in adversary simulation.
• Detailed knowledge of identifying and exploiting vulnerabilities in Windows, Linux, and cloud-based systems.
• Programming experience in Ruby, Python, and Bash; bonus skills in C#, JavaScript, Terraform, and Ansible.
• Clear and concise verbal and written communication skills.
• United States residency.

Responsibilities:

• Perform web application testing methodologies at scale.
• Conduct network and wireless testing methodologies at scale from time to time.
• Discover newly exploitable systems across client fleet.
• Build payloads and C2 infrastructure that evades defenses.
• Mimic tactics and techniques used by real-world adversaries.
• Show impact with post-exploitation activities.
• Manage the platform by conducting tasks, writing findings, and collaborating with clients.
• Develop tools and contribute to the automated infrastructure, commonly using Ruby, Python, PowerShell, C#, and Bash.
• Utilize advanced tools like Burp Suite Pro, Nessus, Metasploit, and CobaltStrike.
• Manage project lifecycles and present findings to clients in professional settings.
• Collaborate with development teams to automate human-driven tasks.
• Work with AWS, Azure, Terraform, Ansible, and GitLab pipelines.