Penetration Tester

Job Summary

The Senior Penetration Testing Contractor will:

• Plan and execute internal and external penetration tests for network and infrastructure environments
• Perform vulnerability identification, validation, and controlled exploitation
• Assess security posture across:
• Network devices (firewalls, routers, switches)
• On-premise servers and operating systems (Windows, Linux, Unix)
• Active Directory and identity infrastructure
• Remote access solutions and VPNs
• Cloud environments (where applicable)
• Simulate advanced threat actor techniques including:
• Privilege escalation
• Lateral movement
• Credential compromise
• Persistence mechanisms
• Evaluate security configurations and control effectiveness
• Conduct testing in accordance with approved Rules of Engagement
• Prepare and deliver formal penetration testing reports suitable for executive, audit, and technical audiences
• Support remediation validation and follow-up testing as required

Qualifications

• 7 10 years of hands-on experience conducting penetration testing and offensive security assessments across enterprise environments.
• 7+ years of demonstrated expertise performing network and infrastructure security testing, identifying vulnerabilities, and validating exploitability across complex systems.
• 8+ years of strong technical understanding of core networking and security technologies including TCP/IP, DNS, DHCP, VPNs, firewalls, IDS/IPS, as well as Windows and Linux system internals and Active Directory attack paths and defensive mechanisms.
• 7+ years of advanced proficiency with industry-standard penetration testing and security assessment tools such as Nmap, Nessus, Metasploit, Burp Suite, BloodHound, NetExec, and PingCastle.
• 7+ years of experience producing comprehensive penetration testing reports, including technical findings, risk ratings, exploitation evidence, and remediation recommendations.
• 7+ years of familiarity with leading security frameworks and standards including NIST SP 800-53, NIST SP 800-115, NIST SP 800-61, MITRE ATT&CK, and the OWASP Testing Guide.
• 7+ years of experience operating within regulated and high-security environments, adhering to strict compliance and security requirements.

Strong understanding of legal, ethical, and regulatory considerations associated with penetration testing, including responsible disclosure, authorization requirements, and compliance obligations