Infrastructure Pentester

Canvendor; San Jose (CA); On-site; USD 170,000 - 210,000; Full time

Job summary

Canvendor is seeking an Infrastructure Penetration Tester based in San Jose, onsite from Day 1. The role covers planning and executing internal and external tests across Windows, Linux, networks, and segmented environments to drive real-world risk reduction.

The position emphasizes identity security, cloud and container assessments (AWS/Azure/GCP, Kubernetes, Docker, IaC), adversary simulation with Red/Purple teams, and automation with Python/PowerShell/Bash.

Qualifications

• 6+ years in infrastructure penetration testing and offensive security.
• Deep knowledge of TCP/IP, Windows/Linux security, and AD.
• Experience testing AWS, Azure, or GCP environments.

Responsibilities

• Plan and execute internal/external tests across Windows, Linux, networks, and segmented environments.
• Assess Active Directory, Entra ID, and identity attack paths to find paths to Domain Admin.
• Evaluate cloud environments (AWS/Azure/GCP) and Kubernetes/Docker/IaC configurations for security.
• Map vulnerabilities to attack paths and collaborate with Red/Purple teams to improve detections.
• Build custom offensive scripts and tools using Python, PowerShell, or Bash.
• Document technical findings, exploitability, and business impact for engineers and executives.

Skills

Infrastructure penetration testing

Windows & Linux security

TCP/IP & networking

Active Directory security

Cloud security testing

Scripting (Python/PowerShell/Bash)

Automation

Kubernetes & Docker

Tools

Kubernetes

Docker

IaC configurations

Job description

Job Title : Infrastructure Penetration tester

Job Location : San Jose CA(Onsite from Day 1)

Duration : 12+ Months

Job Description

• Infrastructure Testing: Plan and execute internal/external tests across Windows, Linux, network layers, and segmented environments.
• Identity Security: Assess Active Directory, Entra ID, and identity attack paths (Kerberos, NTLM, MFA, PAM) to find paths to Domain Admin.
• Cloud & Containers: Evaluate AWS, Azure, or GCP environments alongside Kubernetes, Docker, and IaC configurations.
• Adversary Simulation: Chain vulnerabilities to map realistic attack paths, collaborating with Red/Purple teams to improve detections.
• Automation: Build custom offensive scripts and tools using Python, PowerShell, or Bash.
• Reporting: Document technical findings, exploitability, and business impact for both engineers and executives.

Key Requirements

• Experience: 6+ years in infrastructure penetration testing and offensive security.
• Systems & Networks: Deep knowledge of TCP/IP, enterprise protocols, Windows/Linux security, and Active Directory.
• Cloud: Hands-on testing of at least one major cloud platform (AWS, Azure, GCP).
• Scripting: Strong automation skills in Python, PowerShell, or Bash.
• Soft Skills: Ability to operate independently under strict rules of engagement and partner effectively with engineering teams.

Preferred