Remote AD Security Penetration Tester

CyberOne; Metro Manila; Remote; PHP 500,000 - 900,000; Full time

Job summary

CyberOne is seeking a remote Penetration Tester to conduct advanced engagements with a focus on Active Directory security. You will identify, exploit, and document vulnerabilities and provide remediation guidance to strengthen clients' security posture.

Responsibilities include AD assessments, network/exploitation testing, and preparing detailed reports for technical and non-technical stakeholders. Strong Windows/AD knowledge and OSINT of pentest tools are essential.

Qualifications

• Proven experience conducting penetration tests across enterprise networks and infrastructure.
• Strong knowledge of Windows environments and Active Directory security.
• Experience identifying and exploiting Active Directory vulnerabilities and attack paths.
• Excellent understanding of network protocols and architecture.
• Privilege escalation techniques and lateral movement methodologies.
• Hands-on experience with common pentest tools and methodologies.

Responsibilities

• Conduct comprehensive penetration testing engagements against enterprise infrastructure, networks, systems, and applications.
• Perform manual and automated security assessments to identify vulnerabilities, weaknesses, and potential attack vectors.
• Assess and exploit Active Directory environments, identifying security risks including misconfigurations, privilege escalation paths, lateral movement opportunities, credential theft vulnerabilities, and excessive permissions.
• Execute network and system exploitation activities to validate security weaknesses and assess their impact.
• Evaluate the effectiveness of security controls, hardening measures, and defensive configurations within Active Directory environments.
• Simulate real-world attack scenarios to assess organizational resilience against cyber threats.
• Develop detailed technical reports outlining attack paths, findings, business impact, proof-of-concept evidence, and remediation recommendations.
• Present technical findings to both technical and non-technical stakeholders.
• Work closely with internal teams and clients to support remediation efforts and provide security best-practice guidance.
• Stay up to date with emerging threats, attack techniques, exploitation methodologies, and security technologies.

Skills

Penetration testing

Active Directory security

Windows environments

Network protocols

Privilege escalation

Lateral movement

Threat modeling

Tools

BloodHound

Mimikatz

CrackMapExec

Impacket

Nmap

Burp Suite

Metasploit

Responder

Job description

CyberOne is seeking a remote Penetration Tester to conduct advanced engagements with a focus on Active Directory security. You will identify, exploit, and document vulnerabilities and provide remediation guidance to strengthen clients' security posture.

Responsibilities include AD assessments, network/exploitation testing, and preparing detailed reports for technical and non-technical stakeholders. Strong Windows/AD knowledge and OSINT of pentest tools are essential.