Infrastructure Penetration Tester — Onsite San Jose

Canvendor; San Jose (CA); On-site; USD 170,000 - 210,000; Full time

Job summary

Canvendor is seeking an Infrastructure Penetration Tester based in San Jose, onsite from Day 1. The role covers planning and executing internal and external tests across Windows, Linux, networks, and segmented environments to drive real-world risk reduction.

The position emphasizes identity security, cloud and container assessments (AWS/Azure/GCP, Kubernetes, Docker, IaC), adversary simulation with Red/Purple teams, and automation with Python/PowerShell/Bash.

Qualifications

• 6+ years in infrastructure penetration testing and offensive security.
• Deep knowledge of TCP/IP, Windows/Linux security, and AD.
• Experience testing AWS, Azure, or GCP environments.

Responsibilities

• Plan and execute internal/external tests across Windows, Linux, networks, and segmented environments.
• Assess Active Directory, Entra ID, and identity attack paths to find paths to Domain Admin.
• Evaluate cloud environments (AWS/Azure/GCP) and Kubernetes/Docker/IaC configurations for security.
• Map vulnerabilities to attack paths and collaborate with Red/Purple teams to improve detections.
• Build custom offensive scripts and tools using Python, PowerShell, or Bash.
• Document technical findings, exploitability, and business impact for engineers and executives.

Skills

Infrastructure penetration testing

Windows & Linux security

TCP/IP & networking

Active Directory security

Cloud security testing

Scripting (Python/PowerShell/Bash)

Automation

Kubernetes & Docker

Tools

Kubernetes

Docker

IaC configurations

Job description

Canvendor is seeking an Infrastructure Penetration Tester based in San Jose, onsite from Day 1. The role covers planning and executing internal and external tests across Windows, Linux, networks, and segmented environments to drive real-world risk reduction.

The position emphasizes identity security, cloud and container assessments (AWS/Azure/GCP, Kubernetes, Docker, IaC), adversary simulation with Red/Purple teams, and automation with Python/PowerShell/Bash.