Expert Penetration Tester

IBM Computing; Austin (TX); On-site; USD 120,000 - 180,000; Full time

Job summary

IBM Infrastructure & Technology is seeking a Penetration Tester to assess IT security risks across networks, web apps, and systems. You will visualize topology, plan tests, run hacker simulations, and present remediation recommendations.

Candidates must have hands-on testing experience with industry tools (Nmap, Nessus, Metasploit, BurpSuite, TcpDump) and an OSCP or higher certification. Strong TCP/IP, networking, and coding skills are highly valued.

Qualifications

• Penetration testing experience across OS, web apps, and network infrastructure.
• Experience using common penetration testing tools (NMap, Nessus, Metasploit, BurpSuite, Nikto, Tcpdump).
• Candidate must have OSCP or higher offensive security certification.
• Ability to work with AI tools and LLMs, with administrator-level knowledge of Unix/Windows servers.

Responsibilities

• Plan and conduct penetration tests, including hacker simulations and PoC exploitation.
• Clearly describe findings, concerns and provide remediation recommendations.
• Document results and present actionable security improvements.

Skills

Penetration testing

Networking/TCP-IP

Programming (C/C++/Java/C#)

AI tools & LLMs

Documentation & reporting

Education

OSCP or higher Offensive Security Qualification

Tools

NMap

Nessus

Metasploit

BurpSuite

Nikto

Tcpdump

Job description

Introduction

At IBM Infrastructure & Technology, we design and operate the systems that keep the world running. From high-resiliency mainframes and hybrid cloud platforms to networking, automation, and site reliability. Our teams ensure the performance, security, and scalability that clients and industries depend on every day. Working in Infrastructure & Technology means tackling complex challenges with curiosity and collaboration. You’ll work with diverse technologies and colleagues worldwide to deliver resilient, future-ready solutions that power innovation. With continuous learning, career growth, and a supportive culture, IBM provides the opportunities to build expertise and shape the infrastructure that drives progress.

Your role and responsibilities

A Penetration Tester with deep technical expertise in the processes, procedures, tools and methodology for assessing IT Security risk. The role requires an individual who can independently visualize the network topology from information provided, prepare tests, conduct hacker simulations and demonstrate the likelihood of data compromise via 'proof of concept exploitation' of a given vulnerability. Further to the tests, to be able to clearly describe the problem, the concerns and provide recommendations to fix.

Required technical and professional expertise

Candidates will need to pass a Penetration Testing skills evaluation test.

• Penetration Testing Experience with operating systems, web applications and network infrastructure. Experience with using Penetration Testing Tools. e.g. NMap, Nessus, Metasploit, BurpSuite, Nikto, Tcpdump. Required certification: OSCP or higher Offensive Security Qualification

• AI Skills: Ability to work with LLMs, Agentic, Tools, MCP / Administrator level knowledge of Server Operating Systems specifically Unix and Windows.

• Intricate technical knowledge of TCP/IP Networking/Routing, Intranet / Internet Architectures and Segregation Technologies/VLANs, Firewalls, Intrusion Detection, Intrusion Prevention, SQL Databases 'Ability to test web technologies e.g. web applications, containers, container managers.

• Programming ability to create, read and modify exploit code to achieve system penetration. C, C++, Java, C#, scripting knowledge is an asset.

• Ability to document and present the penetration testing results including recommendations to fix.

Preferred technical and professional experience

• Penetration Testing Experience with operating systems, web applications and network infrastructure.

• Experience with using Penetration Testing Tools. e.g. NMap, Nessus, Metasploit, BurpSuite, Nikto, Tcpdump.

• Required certification: OSCP or higher Offensive Security Qualification

• AI Skills: Ability to work with LLMs, Agentic, Tools, MCP

• Administrator level knowledge of Server Operating Systems specifically Unix and Windows.

• Intricate technical knowledge of TCP/IP Networking/Routing, Intranet / Internet Architectures and Segregation Technologies/VLANs, Firewalls, Intrusion Detection, Intrusion Prevention, SQL Databases

• Ability to test web technologies e.g. web applications, containers, container managers

• Programming ability to create, read and modify exploit code to achieve system penetration. C, C++, Java, C#, scripting knowledge is an asset.

• Ability to document and present the penetration testing results including recommendations to fix.

IBM is committed to creating a diverse environment and is proud to be an equal-opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, gender, gender identity or expression, sexual orientation, national origin, caste, genetics, pregnancy, disability, neurodivergence, age, veteran status, or other characteristics. IBM is also committed to compliance with all fair employment practices regarding citizenship and immigration status.