Penetration Tester – Infrastructure, Red Team

This is a fully remote position, open to applicants in Florida, +1 more state.

📋 Description

• Strategize and implement infrastructure penetration testing projects across on-premises, hybrid, cloud, wireless, and enterprise network settings.

• Conduct internal and external network penetration tests to discover, verify, and exploit security vulnerabilities through manual testing methods and widely recognized offensive security tools.

• Evaluate Active Directory, Microsoft Entra ID (Azure AD), Windows and Linux systems, virtualization platforms, cloud services, and supporting infrastructure.

• Analyze AWS, Microsoft Azure, and Google Cloud Platform environments for configuration flaws, privilege escalation risks, identity vulnerabilities, and cloud security issues.

• Examine containerized environments, Kubernetes platforms, CI/CD pipelines, and cloud-native technologies as relevant.

• Lead and participate in adversary simulation, red team, and objective-driven security projects.

• Carry out offensive security operations encompassing reconnaissance, initial access, persistence, privilege escalation, credential access, lateral movement, defense evasion, command and control, and objective execution.

• Assist in purple team activities by validating detection capabilities, enhancing monitoring systems, and fortifying defensive measures.

• Create and implement attack scenarios that illustrate realistic business repercussions while preserving client system integrity.

• Compile technical reports detailing vulnerabilities, attack vectors, business implications, risk assessments, and remediation advice.

• Present evaluation results to technical teams, executive stakeholders, and client leadership.

• Offer technical advice on remediation techniques, security architecture, and defensive enhancements.

• Oversee assigned projects to ensure quality delivery, adherence to timelines, and satisfaction of client expectations.

• Contribute to testing methodologies, internal tools, technical documentation, and service offerings.

• Engage in technical research, automation projects, internal training, and knowledge-sharing initiatives.

• Collaborate with consulting teams to enhance technical quality, consistency, and service delivery.

• Execute additional tasks as assigned.

⛳️ Requirements

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related field; equivalent hands-on experience will be taken into account.

• At least 3 years of professional experience in infrastructure penetration testing, red teaming, adversary simulation, or offensive security consulting.

• Proven experience in performing penetration testing across enterprise infrastructure, including Windows, Linux, Active Directory, Microsoft Entra ID, cloud platforms, and enterprise networking.

• Familiarity with internal and external network penetration testing, privilege escalation, Active Directory security evaluations, and lateral movement testing.

• Experience in assessing cloud environments, including AWS, Microsoft Azure, or Google Cloud Platform.

• Strong grasp of enterprise networking, authentication technologies, identity management, cloud security, and offensive security practices.

• Proficient in using industry-standard offensive security frameworks, tools, and techniques.

• Exceptional technical writing, presentation, and communication skills, capable of conveying findings to both technical and executive audiences.

• Industry certifications like OSCP, OSEP, CRTO, CRTE, CARTP, CARTA, CREST CRT, CREST CCT, PNPT, GPEN, GXPN, or equivalent are advantageous.

• OSCP or equivalent demonstrated technical expertise is highly preferred.

• Experience in Red Team, Purple Team, adversary simulation, or threat emulation engagements is considered a plus.

• Customer-centric mindset.

• Strong communicator with clients, project managers, and team members.

• Capability to respond swiftly and deliver work punctually.

• Willingness to thoroughly investigate every finding until its impact is established.

• Ability to adapt to rapidly evolving environments.

• Commitment to ongoing learning and enhancement of cybersecurity skills.

• Self-driven, reliable, and modest.

🏝️ Benefits

• Competitive salary and opportunities for advancement.

• Financial support for education and professional development to foster ongoing learning, certifications, and technical growth.

• Flexible work environment that encourages employees to excel in their roles.

• One paid volunteer day per year to contribute to your community.

• Paid time off for your birthday.

• Paid U.S. public holidays.

• Fully remote positions available in Texas or Florida.