This is a fully remote position, open to applicants in United States.

📋 Description

• Execute external network penetration assessments: identifying attack surfaces, discovering services and applications, conducting credential attacks, and exploiting exposed services within an authorized scope.

• Perform internal network penetration assessments: executing network and host enumeration, Active Directory reconnaissance, analyzing attack paths, harvesting and reusing credentials, escalating privileges, and lateral movement.

• Validate the output from vulnerability scanners and eliminate false positives through manual verification.

• Collect reproducible evidence for each identified finding.

• Conduct retesting of remediated vulnerabilities.

• Adhere strictly to the authorized scope and rules of engagement for every assignment.

• Collaborate with senior testers on active client engagements right from the beginning.

⛳️ Requirements

• 1-3 years of experience in IT, systems or network administration, SOC, or a related area, or demonstrable hands-on offensive security expertise through labs and personal projects.

• Strong understanding of networking fundamentals: TCP/IP, DNS, SMB, LDAP, HTTP/S.

• Proficient knowledge of Windows and Active Directory, including common misconfigurations.

• Comfortable operating within a Linux terminal.

• Familiarity with standard tools such as Nmap, Nessus, Metasploit, Impacket, BloodHound, Responder, Hashcat, and Burp Suite.

• Basic scripting abilities in Python, PowerShell, or Bash.

• Excellent written communication skills and a professional demeanor when interacting with clients.

• OSCP, PNPT, CPTS, eJPT, or CRTP — either obtained or currently in progress (preferred).

• Documented lab or CTF work that can be discussed in detail (preferred).

• Previous experience in systems or network administration (preferred).

• Exposure to cloud or web application testing (preferred).