Remote Penetration Testing Analyst

Sophos Group; Hinoba-an; On-site; PHP 1,500,000 - 2,100,000; Full time

Job summary

Sophos is seeking an experienced Penetration Testing Analyst 3 to join our Red Team. The role focuses on coordinating testing readiness, communicating with clients, and performing advanced security testing across application and network domains.

The position supports remote engagements with potential travel up to 10%. You’ll lead client calls, produce detailed security assessment reports, and continuously research new threats and exploits to enhance engagement outcomes.

Qualifications

• 3+ years of experience in Information Security.
• Excellent client-facing and internal communication skills, both written and verbal.
• Demonstrate ability to learn quickly and thrive in a high-energy team environment.
• Professional, “get it done” attitude, work ethic, and strong team player.
• Solid organizational skills including attention to detail and multitasking skills.
• Minimum of 3 years of experience with penetration testing.
• Minimum of 3 years of experience with at least one of the following: Nmap, Metasploit, Kali Linux, Burp Suite.
• Desirable: Experience with NMap Scanning, understanding of web app authentication methods, Linux, networking and appliances, offensive certifications (CEH, WAPT, GPEN, GWAPT, GAWN, OSCP).
• Knowledge of operating systems administration and internals (Windows/Linux).
• Understanding of TCP/IP networking at a technical level.
• Experience with various application attack vectors, security test processes, and OWASP Top 10.
• Good troubleshooting skills, technical communication skills, and problem-solving skills.

Responsibilities

• Coordinate activities, documentation, readiness schedules, and information between business, clients, and project teams.
• Act as the point of contact and communicate testing readiness status adequately to all participants.
• Use project management tools to monitor tasks, responsible parties, timelines, and status.
• Report and escalate issues to management as needed.
• Take ownership for new requests; explore opportunities to add value to job accomplishments.
• Conduct application security assessments (web/mobile/API) or network penetration testing.
• Produce and deliver vulnerability and exploit information in professional reports.
• Conduct client conference calls from test readiness through close-out review of findings and remediation recommendations.
• Perform proactive research to identify new threats, vulnerabilities, and exploits.
• Exploit testing with tools and document findings for client remediation.
• Excel as a self-directed contributor and team member.
• Perform other essential duties as assigned.

Skills

Client-facing communication

Team player

Troubleshooting

Penetration testing

Networking knowledge

Tools

Nmap

Metasploit

Kali Linux

Burp Suite

Job description

Sophos is seeking an experienced Penetration Testing Analyst 3 to join our Red Team. The role focuses on coordinating testing readiness, communicating with clients, and performing advanced security testing across application and network domains.

The position supports remote engagements with potential travel up to 10%. You’ll lead client calls, produce detailed security assessment reports, and continuously research new threats and exploits to enhance engagement outcomes.