Expert Penetration Tester

IBM; Dallas (TX); On-site; USD 90,000 - 120,000; Full time

Job summary

IBM is looking for a skilled Penetration Tester in Dallas, Texas. This role involves assessing IT Security risks through hacker simulations and vulnerability exploitation. Candidates should have a Bachelor’s degree and experience with security tools like NMap and Metasploit.

Successful applicants will have depth in network security, ability to document findings, and present recommendations for improvement. Join a dynamic team at IBM and contribute to shaping the future of technology.

Qualifications

• Penetration Testing experience with operating systems, web applications, and network infrastructure.
• Experience with using Penetration Testing Tools such as NMap, Nessus, Metasploit, BurpSuite, Nikto, Tcpdump.
• Required certification: OSCP or higher Offensive Security qualification.

Responsibilities

• Visualize network topology and prepare tests.
• Conduct hacker simulations and demonstrate data compromise risks.
• Provide clear descriptions and recommendations based on test results.

Skills

Penetration Testing

TCP/IP networking

NMap

Metasploit

C programming

Python scripting

Education

Bachelor’s Degree

Tools

Nessus

BurpSuite

Tcpdump

Job description

Introduction

At IBM Infrastructure & Technology, we design and operate the systems that keep the world running. From high‑resiliency mainframes and hybrid cloud platforms to networking, automation, and site reliability, our teams ensure the performance, security, and scalability that clients and industries depend on every day. Working in Infrastructure & Technology means tackling complex challenges with curiosity and collaboration. You’ll work with diverse technologies and colleagues worldwide to deliver resilient, future‑ready solutions that power innovation. With continuous learning, career growth, and a supportive culture, IBM provides the opportunities to build expertise and shape the infrastructure that drives progress.

Your Role and Responsibilities

A Penetration Tester with deep technical expertise in the processes, procedures, tools, and methodology for assessing IT Security risk. The role requires an individual who can independently visualize the network topology from information provided, prepare tests, conduct hacker simulations, and demonstrate the likelihood of data compromise via “proof of concept exploitation” of a given vulnerability. Further to the tests, the candidate must be able to clearly describe the problem, the concerns, and provide recommendations to fix.

Preferred Education

Bachelor’s Degree

Required Technical and Professional Expertise

• Penetration Testing experience with operating systems, web applications and network infrastructure. Experience with using Penetration Testing Tools such as NMap, Nessus, Metasploit, BurpSuite, Nikto, Tcpdump. Required certification: OSCP or higher Offensive Security qualification.
• AI Skills: Ability to work with LLMs, agentic tools, MCP, and administrator level knowledge of server operating systems specifically Unix and Windows.
• Intricate technical knowledge of TCP/IP networking/routing, intranet/internet architectures and segregation technologies/VLANs, firewalls, intrusion detection, intrusion prevention, SQL databases. Ability to test web technologies such as web applications, containers, and container managers.
• Programming ability to create, read, and modify exploit code to achieve system penetration. C, C++, Java, C#, scripting knowledge is an asset.
• Ability to document and present penetration testing results, including recommendations to fix.

Preferred Technical and Professional Experience

• Penetration Testing experience with operating systems, web applications and network infrastructure.
• Experience with using Penetration Testing Tools such as NMap, Nessus, Metasploit, BurpSuite, Nikto, Tcpdump.
• Required certification: OSCP or higher Offensive Security qualification.
• AI skills: Ability to work with LLMs, agentic tools, MCP.
• Administrator level knowledge of server operating systems specifically Unix and Windows.
• Intricate technical knowledge of TCP/IP networking/routing, intranet/internet architectures and segregation technologies/VLANs, firewalls, intrusion detection, intrusion prevention, SQL databases.
• Ability to test web technologies such as web applications, containers, container managers.
• Programming ability to create, read, and modify exploit code to achieve system penetration. C, C++, Java, C#, scripting knowledge is an asset.
• Ability to document and present penetration testing results, including recommendations to fix.