Remote Penetration Tester for Enterprise AD & Security

CyberOne; Manila; Remote; PHP 900,000 - 1,200,000; Full time

Job summary

CyberOne is a pure-play Microsoft security partner delivering security services and advisory across Defender XDR, Sentinel, Entra and more. We are seeking a Penetration Tester to perform extensive engagements against enterprise networks, with a strong focus on Active Directory security and exploitation techniques.

The role requires hands-on testing using tools like BloodHound, Mimikatz, Metasploit, and Nmap, plus excellent reporting and collaboration with clients to remediate findings.

Qualifications

• Proven experience conducting penetration tests across enterprise networks and infrastructure.
• Strong knowledge of Windows environments and Active Directory security.
• Experience identifying and exploiting Active Directory vulnerabilities and attack paths.
• Excellent understanding of network protocols and architecture, Windows Server administration, Kerberos and NTLM authentication, privilege escalation techniques, and lateral movement methodologies.

Responsibilities

• Conduct comprehensive penetration testing engagements against enterprise infrastructure, networks, systems, and applications.
• Perform manual and automated security assessments to identify vulnerabilities, weaknesses, and potential attack vectors.
• Assess and exploit Active Directory environments, identifying security risks including misconfigurations and privilege escalation paths.
• Execute network and system exploitation activities to validate security weaknesses and assess impact.
• Evaluate the effectiveness of security controls, hardening measures, and defensive configurations within AD environments.
• Simulate real-world attack scenarios to assess organizational resilience against threats.
• Develop detailed technical reports outlining attack paths, findings, business impact, and remediation.
• Present findings to technical and non-technical stakeholders; support remediation with best-practice guidance.

Skills

Penetration testing

Windows security

Active Directory security

Privilege escalation

Lateral movement

Security assessments

Attack vectors

Reporting

Education

OSCP

CREST CRT/CCT INF

GPEN

Microsoft security certs

Tools

BloodHound

Mimikatz

CrackMapExec

Impacket

Nmap

Burp Suite

Metasploit

Responder

Job description

CyberOne is a pure-play Microsoft security partner delivering security services and advisory across Defender XDR, Sentinel, Entra and more. We are seeking a Penetration Tester to perform extensive engagements against enterprise networks, with a strong focus on Active Directory security and exploitation techniques.

The role requires hands-on testing using tools like BloodHound, Mimikatz, Metasploit, and Nmap, plus excellent reporting and collaboration with clients to remediate findings.