Penetration Tester

This is a fully remote position, open to applicants in California.

📋 Description

• Independently carry out client penetration testing engagements across DeepSeas’ primary service lines.

• Execute both internal and external network penetration tests, encompassing enumeration, exploitation, lateral movement, and post-exploitation within a defined scope.

• Conduct web application assessments in accordance with OWASP Top 10 and API security testing standards.

• Evaluate cloud environments for misconfigurations, IAM abuses, and privilege escalation.

• Perform cloud configuration audits and provide prioritized remediation recommendations.

• Engage in red team and purple team exercises.

• Assist with AI/LLM security evaluations, including prompt injection, model abuse scenarios, and ensuring coverage of OWASP LLM Top 10 under senior supervision.

• Create client-ready reports detailing findings, including technical narratives, reproduction steps, risk ratings, and remediation suggestions.

• Take part in client kick-off meetings and debrief walkthroughs.

• Convey findings to both technical and non-technical stakeholders.

• Maintain documentation of engagements, track time, and manage artifacts within project management systems.

• Commit to continuous personal development through training, lab work, and certification progress.

• Adhere to information security policies and procedures while reporting any suspicious activities or vulnerabilities.

⛳️ Requirements

• 2-5 years of professional experience in penetration testing or applied offensive security; strong candidates with equivalent demonstrated expertise will be considered.

• Proficient in tools such as Nmap, Metasploit, Burp Suite, Nessus/OpenVAS, BloodHound, or similar alternatives.

• Solid grasp of networking fundamentals, including TCP/IP, DNS, HTTP/S, Active Directory, and VPNs.

• Familiarity with common classes of vulnerabilities.

• Basic knowledge of Python, Bash, or PowerShell for automation and tooling tasks.

• In-depth understanding of AWS, Azure, or GCP along with common cloud misconfiguration patterns.

• Strong understanding of AI technologies relevant to daily work activities.

• Excellent written communication skills and the ability to produce accurate, professional-quality documentation of findings.

• Eligibility to work in the United States.

• Must respond to questions regarding work authorization and visa sponsorship.

🏝️ Benefits

• Flexible work schedule and a casual work environment.

• Comprehensive healthcare coverage.

• Dental insurance.

• Vision insurance.

• Paid Time Off (PTO).

• Sick Leave.

• Personal Choice Holidays.

• Life and Accident Insurance.

• 401(k) plan with company matching.

• Company bonus opportunities.

• Assigned training, lab environments, and pathways for certification advancement.

• A diverse range of projects.

• A collaborative workplace culture.

• Travel opportunities of up to 25% of the time.