Senior Penetration Tester - Remote Red Team

Sophos Group; Hinoba-an; On-site; PHP 6,254,000 - 8,755,000; Full time

Job summary

Sophos is seeking an experienced and motivated Senior Penetration Testing Analyst 2 to join our Red Team. The role focuses on applying information security threat intelligence to identify vulnerabilities in client environments, via application security or network testing.

You will produce professional security assessment reports and lead client conference calls from project kick-off through remediation recommendations. Strong communication, analytical, and threat research skills are essential.

Qualifications

• 6+ years in a professional setting; degree required or equivalent
• 4+ years in penetration testing
• Experience with at least one of: Nmap, Metasploit, Kali Linux, Burp Suite
• Offensive security certifications (CEH, WAPT, GPEN, GWAPT, GAWN, OSCP)
• Knowledge of NetSparker and AppScan; OS/network concepts and Windows/Linux

Responsibilities

• Conduct application security assessments (web, mobile, API) or network penetration tests
• Produce professional security assessment reports with findings and remediation recommendations
• Lead client calls from kick-off to close-out
• Research new threats, vulnerabilities, and exploits
• Contribute as a self-directed individual and team member

Education

Bachelor of Science in Computer Science / Computer Engineering / Electrical Engineering or related field

Bachelor’s degree in related field or equivalent experience

Tools

Nmap

Metasploit

Kali Linux

Burp Suite

NetSparker

AppScan

Job description

Sophos is seeking an experienced and motivated Senior Penetration Testing Analyst 2 to join our Red Team. The role focuses on applying information security threat intelligence to identify vulnerabilities in client environments, via application security or network testing.

You will produce professional security assessment reports and lead client conference calls from project kick-off through remediation recommendations. Strong communication, analytical, and threat research skills are essential.