Penetrating Tester

Penetrating Tester

Responsibilities:

• Perform web application testing methodologies at scale.
• Perform network and wireless testing methodologies at scale from time to time.
• Discover newly exploitable systems across our fleet of clients. It's fun to test that new vulnerability the day it's released!
• Build payloads and C2 infrastructure that evades defenses.
• Mimic tactics and techniques used by real-world adversaries.
• Show impact with post-exploitation activities.
• Manage our platform by conducting tasks, write findings, and work with clients to help detect and prevent.
• Develop tools and contribute to our automated infrastructure. You'll commonly program in the following languages: Ruby, Python, PowerShell, C# Bash, etc.
• Advanced usage of the following tools: Burp Suite Pro, Nessus, Metasploit, CobaltStrike, etc.
• Manage project lifecycles and present professionally to clients. Kickoff calls, debriefs, etc.
• Work closely with development teams to migrate human-driven tasks into automation.
• Work with AWS, Azure, terraform, ansible, and gitlab pipelines.

Requirements Minimum:

• Seven or more years of hands-on penetration testing experience.

• Five or more years on hands-on Web App penetration testing experience.
• Adversary Simulation experience.
• Detailed knowledge of identifying and exploiting vulnerabilities in Windows, Linux, and cloud -based systems.
• Programming experience in Ruby, Python, Bash. Bonus (C#, JavaScript, terraform, ansible).
• Clear and concise verbal and written skills.

Preferred:

• OSCP certified.
• Has industry involvement by contributes research, open-source projects, or public speaking
• Experience managing or working with management on security projects and teams.

Remote work acceptable