Penetration Tester

Description

We are looking for an experienced Penetration Tester to join our cybersecurity team and enhance the security of our Windows-based systems. The ideal candidate will play a key role in identifying vulnerabilities, conducting simulated attacks, and implementing strategies to safeguard critical infrastructure, including servers, endpoints, and Active Directory environments. This position offers an opportunity to apply advanced penetration testing techniques and collaborate with IT teams to strengthen security measures.

Responsibilities:
Perform penetration tests and security evaluations of Windows environments, including Active Directory, servers, endpoints, and domain controllers.
Execute red team scenarios to simulate real-world attack tactics, techniques, and procedures.
Identify and exploit vulnerabilities within Windows systems, applications, and networks, documenting findings comprehensively.
Develop and utilize custom scripts and tools using programming languages such as PowerShell, Python, C++, or C#.
Work closely with IT teams to address security gaps and implement mitigation strategies.
Prepare detailed reports outlining vulnerabilities and actionable recommendations to fortify Windows infrastructure.
Stay updated on emerging threats, attack vectors, and techniques targeting Windows-based systems.
Evaluate Group Policy Objects and other system configurations to ensure adherence to security standards.
Support the improvement of cybersecurity practices by sharing insights and conducting knowledge transfer sessions.

Requirements

Demonstrated expertise in penetration testing, specifically focused on Windows systems and infrastructure.
Advanced understanding of Active Directory architecture and common attack methods such as Kerberoasting and Pass-the-Hash.
In-depth knowledge of Windows authentication mechanisms and privilege escalation techniques.
Proficiency with tools like Metasploit, Cobalt Strike, BloodHound, Mimikatz, and CrackMapExec.
Familiarity with Windows internals, including registry, processes, and memory management.
Strong scripting and automation skills using PowerShell, Python, or Bash.
Solid grasp of network protocols and their vulnerabilities.
Excellent analytical and communication skills to translate technical findings into actionable solutions.

Technology Doesn't Change the World, People Do.

Robert Half is the world's first and largest specialized talent solutions firm that connects highly qualified job seekers to opportunities at great companies. We offer contract, temporary and permanent placement solutions for finance and accounting, technology, marketing and creative, legal, and administrative and customer support roles.

Robert Half works to put you in the best position to succeed. We provide access to top jobs, competitive compensation and benefits, and free online training. Stay on top of every opportunity - whenever you choose - even on the go. Download the Robert Half app and get 1-tap apply, notifications of AI-matched jobs, and much more.

All applicants applying for U.S. job openings must be legally authorized to work in the United States. Benefits are available to contract/temporary professionals, including medical, vision, dental, and life and disability insurance. Hired contract/temporary professionals are also eligible to enroll in our company 401(k) plan. Visit roberthalf.gobenefits.net for more information.

2025 Robert Half. An Equal Opportunity Employer. M/F/Disability/Veterans. By clicking "Apply Now," you're agreeing to Robert Half's Terms of Use and Privacy Notice.