W2 Penetration Testing Engineer

Introduction

As a W2 Penetration Testing Engineer, you will be responsible for conducting various security tests to identify vulnerabilities and improve the overall security posture of the organization. You will work closely with different teams to ensure that systems and networks are secure against potential threats.

Responsibilities

• Perform web, API, network, and cloud penetration testing.
• Conduct manual exploitation and validate remediation fixes.
• Prepare technical reports with remediation guidance.
• Collaborate with Engineering, Security, and GRC teams.
• Develop offensive security playbooks and automate testing using Python/PowerShell and AI tools.
• Mentor team members and stay updated on emerging threats and CVEs.

Requirements

Required Technical Stack:

• Experience: 5–7+ years in Penetration Testing / Offensive Security
• Web & API Security: Web Application, API, Network, and Cloud Penetration Testing
• Security Tools: Burp Suite, Kali Linux, OWASP ZAP, Nmap, Metasploit
• Network Security: Active Directory, Kerberoasting, Privilege Escalation, Lateral Movement, Delegation Abuse
• Cloud Security: AWS/Azure/Google Cloud Platform, IAM Security, Container Security, CI/CD Pipeline Security
• Frameworks: OWASP Top 10, MITRE ATT&CK, CVSS, STRIDE/PASTA Threat Modeling
• Programming/Scripting: Python, Bash, PowerShell
• AI: Experience using AI tools to improve penetration testing workflows
• Security Practices: Vulnerability Assessment, Manual Exploitation, Threat Modeling, Security Reporting

Preferred:

• OSCP, OSWE, OSEP (or equivalent)
• AWS/Azure/Google Cloud Platform Security Certification
• Experience with C2 Frameworks, SIEM/EDR, SAST, DAST, SCA
• Knowledge of SOC 2, ISO 27001