Penetration Tester

No 3rd Party Recruiters

We are seeking a skilled and motivated Penetration Tester to join our team and play a key role in delivering our penetration testing services. In this client-facing role, you will simulate real-world cyberattacks on client networks, applications, cloud environments, and infrastructure to uncover security weaknesses, provide actionable recommendations, and help organizations strengthen their defenses.

You will work closely with clients, account managers, and our Cybersecurity Engineers team to scope engagements, execute tests safely and ethically, and deliver clear, high-impact reports that drive remediation and risk reduction.

Key Responsibilities

Plan, scope, and execute penetration tests (internal, external, web application, mobile, wireless, cloud, and social engineering) for MSP clients across various industries

Perform manual and automated vulnerability assessments using industry-standard tools and custom techniques

Identify, exploit, and document security vulnerabilities, misconfigurations, and business logic flaws

Simulate advanced attack scenarios, including lateral movement, privilege escalation, and persistence techniques in Windows, Linux, and hybrid environments

Conduct testing in accordance with recognized methodologies (e.g., OWASP, PTES, OSSTMM, NIST) and client-specific rules of engagement

Produce detailed, professional reports with executive summaries, technical findings, risk ratings, evidence, and prioritized remediation recommendations

Stay current with emerging threats, attack vectors, new vulnerabilities (CVEs), and penetration testing techniques

Required Qualifications

3+ years of hands-on penetration testing or related red team / ethical hacking experience

Deep understanding of common vulnerabilities (OWASP Top 10, CWE Top 25) and exploitation techniques

Experience writing clear, professional technical reports and communicating findings to both technical and non-technical audiences

Strong understanding of ethical guidelines and legal requirements for penetration testing

Excellent problem-solving skills, attention to detail, and ability to work independently on client engagements

Preferred Qualifications

Relevant certifications such as:

Offensive Security Certified Professional (OSCP) – highly preferred

CompTIA PenTest+

GIAC Penetration Tester (GPEN)

Certified Ethical Hacker (CEH)

Or other advanced certs (e.g., OSCE, OSEP, CRTP, PNPT)

Experience testing in MSP or client-service environments (multi-tenant awareness, scoped engagements)

Knowledge of compliance frameworks (PCI DSS, HIPAA, SOC 2, NIST 800-53, ISO 27001)

Experience with cloud penetration testing, API testing, or red team operations

Active participation in bug bounty programs, CTFs, or security research