Pen Tester

Pen Tester

Overview
A growing organization is seeking a Pen Tester to identify vulnerabilities and simulate real-world attacks across applications, infrastructure, and cloud environments.

This role will play a critical part in improving security posture by proactively identifying risks and validating security controls.

Key Responsibilities

• Conduct penetration testing across web applications, APIs, networks, and cloud environments

• Perform adversary emulation exercises based on real-world attack scenarios

• Identify, validate, and exploit vulnerabilities to assess risk and impact

• Test identity, access control, and privilege escalation scenarios

• Evaluate security controls, logging, and detection capabilities

• Document findings and provide actionable remediation recommendations

• Collaborate with engineering and security teams to resolve vulnerabilities

Required Qualifications

• 4+ years of experience in penetration testing or offensive security

• Experience testing applications, infrastructure, and cloud environments

• Familiarity with tools such as Burp Suite, Nmap, Metasploit, etc.

• Knowledge of common vulnerabilities (e.g., OWASP Top 10)

• Strong understanding of networking, operating systems, and security concepts

• Excellent communication and reporting skills

Preferred Qualifications

• Experience with cloud security testing (AWS, Azure, GCP)

• Experience with containers, Kubernetes, or modern infrastructure

• Scripting experience (Python, Bash, etc.)

• Familiarity with security frameworks (MITRE ATT&CK, NIST, etc.)

• Relevant certifications (OSCP, CEH, GPEN, etc.)

Compensation & Benefits

• Base Salary: $150,000 annually

• Medical, Dental, Vision benefits available

Work Environment

• Collaborative, cross-functional security environment

• Hands-on technical role with high impact

• Fast-paced, evolving threat landscape