Penetration Tester

This is a fully remote position, open to applicants in California.

📋 Description

• Independently execute client penetration testing projects across DeepSeas’ primary service areas.

• Carry out both internal and external network penetration assessments, including tasks such as enumeration, exploitation, lateral movement, and post-exploitation within the defined scope.

• Conduct web application evaluations in accordance with OWASP Top 10 guidelines and standards for API security testing.

• Evaluate cloud environments for misconfigurations, IAM abuse, and privilege escalation vulnerabilities.

• Perform cloud configuration audits and offer prioritized remediation recommendations.

• Engage in red team and purple team exercises.

• Assist in AI/LLM security evaluations, including prompt injection, model abuse scenarios, and coverage of the OWASP LLM Top 10 under senior supervision.

• Create client-facing findings reports that include technical narratives, replication steps, risk assessments, and remediation suggestions.

• Participate in client kick-off meetings and debriefing sessions.

• Effectively communicate findings to both technical and non-technical stakeholders.

• Maintain documentation of engagements, track time, and manage artifacts within project management systems.

• Commit to continuous professional development through training, labs, and certification progression.

• Adhere to information security policies and procedures, reporting any suspicious activities or vulnerabilities.

⛳️ Requirements

• 2-5 years of professional experience in penetration testing or applied offensive security; strong candidates with equivalent demonstrated skills will also be considered.

• Proficiency in using Nmap, Metasploit, Burp Suite, Nessus/OpenVAS, BloodHound, or similar tools.

• A solid grasp of networking principles, including TCP/IP, DNS, HTTP/S, Active Directory, and VPNs.

• Familiarity with common classes of vulnerabilities.

• Basic automation and tooling experience with Python, Bash, or PowerShell.

• In-depth knowledge of AWS, Azure, or GCP and typical cloud misconfiguration patterns.

• Strong understanding of AI technologies in daily work activities.

• Exceptional written communication skills, capable of producing precise, professional-quality findings documentation.

• Eligibility to work in the United States.

• Must respond to questions regarding work authorization and visa sponsorship.

🏝️ Benefits

• Flexible work schedule and a casual work environment.

• Comprehensive healthcare coverage.

• Dental insurance.

• Vision insurance.

• Paid Time Off (PTO).

• Sick Leave.

• Personal Choice Holidays.

• Life and Accident Insurance.

• 401(k) plan with company matching.

• Company bonus opportunities.

• Assigned training, lab environments, and support for certification advancement.

• A diverse range of projects.

• A collaborative work culture.

• Travel opportunities of up to 25% of the time.