Penetration Tester – Infrastructure, Red Team

This is a fully remote position, open to applicants in Florida, +1 more state.

📋 Description

• Strategically plan and implement infrastructure penetration testing initiatives across on-premises, hybrid, cloud, wireless, and enterprise network settings.

• Conduct both internal and external network penetration tests to discover, verify, and exploit security weaknesses.

• Evaluate Active Directory, Microsoft Entra ID, as well as Windows and Linux environments, virtualization platforms, cloud services, and their supporting infrastructure.

• Analyze AWS, Microsoft Azure, and Google Cloud Platform environments for configuration vulnerabilities, privilege escalation risks, identity threats, and cloud security issues.

• Review containerized environments, Kubernetes platforms, CI/CD pipelines, and applicable cloud-native technologies.

• Engage in and lead adversary simulation, red teaming, and objective-driven security initiatives.

• Implement offensive security operations that encompass reconnaissance, initial access, persistence, privilege escalation, credential access, lateral movement, defense evasion, command and control, and objective execution.

• Assist in purple team initiatives by validating detections, enhancing monitoring capabilities, and fortifying defensive measures.

• Create and execute attack scenarios that illustrate realistic business impacts while ensuring the integrity of client systems.

• Develop technical reports that detail vulnerabilities, attack pathways, business implications, risk assessments, and remediation suggestions.

• Deliver findings to technical teams, executive stakeholders, and client leadership.

• Offer advice on remediation tactics, security architecture, and enhancements to defensive strategies.

• Oversee assigned engagements to fulfill quality standards, timelines, and client expectations.

• Contribute to the development of testing methodologies, internal tools, technical documentation, service offerings, research, automation, training, and knowledge sharing.

• Collaborate with consulting teams to enhance technical quality, consistency, and service delivery.

• Perform additional duties as required.

⛳️ Requirements

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related field; equivalent hands-on experience will also be considered.

• At least 3 years of professional experience in infrastructure penetration testing, red teaming, adversary simulation, or offensive security consulting.

• Proven experience in conducting penetration testing across enterprise infrastructure, including Windows, Linux, Active Directory, Microsoft Entra ID, cloud platforms, and enterprise networking.

• Proficient in performing internal and external network penetration tests, privilege escalation, Active Directory security evaluations, and lateral movement assessments.

• Experience in evaluating AWS, Microsoft Azure, or Google Cloud Platform environments.

• Strong grasp of enterprise networking, authentication technologies, identity management, cloud security, and offensive security practices.

• Familiarity with industry-standard offensive security frameworks, tools, and techniques.

• Exceptional technical writing, presentation, and communication abilities.

• OSCP or equivalent demonstrated technical proficiency is highly preferred.

• Industry certifications such as OSCP, OSEP, CRTO, CRTE, CARTP, CARTA, CREST CRT, CREST CCT, PNPT, GPEN, GXPN, or similar are advantageous.

• Experience in participating in Red Team, Purple Team, adversary simulation, or threat emulation initiatives is beneficial.

• A customer-first approach is essential.

• Capable of communicating effectively with clients, project managers, colleagues, technical stakeholders, and executive leadership.

• Adaptability to rapidly evolving environments and a commitment to continuous learning.

• Self-driven, reliable, modest, and open to improvement.

🏝️ Benefits

• Competitive salary and opportunities for growth.

• Educational and professional development reimbursement.

• Flexible working environment.

• One paid volunteer day each year.

• Paid day off for your Birthday.

• Paid U.S. public holidays.

• Fully remote work options available within Texas or Florida.