Internal Network Pen Tester (Onsite Travel)

Xtreme Solutions, Inc.; Fontana (CA); On-site; USD 110,000 - 160,000; Full time

Job summary

Xtreme Solutions, Inc. in California is seeking an experienced internal network penetration tester to simulate attacks from predetermined footholds across county facilities, testing servers, workstations, endpoints and password strength.

You will physically connect to network ports, conduct phishing-based foothold simulations, and document attack paths and business impact for each department report, with travel to multiple client sites as required.

Qualifications

• 4+ years of internal/network penetration testing experience, including Active Directory attack paths.
• Comfort working onsite at client facilities, including data centers and administrative offices.
• Experience with internal recon and lateral movement tooling (BloodHound, Responder, or equivalent).

Responsibilities

• Physically connect to County network ports to simulate an unauthenticated internal attacker.
• Simulate a successful phishing/Trojan compromise from an authenticated workstation foothold.
• Attempt password cracking and lateral movement while evading department detection and response efforts.
• Document internal attack paths, exploited vulnerabilities, and business impact for each department report.

Skills

Penetration testing

Internal network security

Active Directory attack paths

Education

OSCP or GPEN certification

Tools

BloodHound

Responder

Job description

Xtreme Solutions, Inc. in California is seeking an experienced internal network penetration tester to simulate attacks from predetermined footholds across county facilities, testing servers, workstations, endpoints and password strength.

You will physically connect to network ports, conduct phishing-based foothold simulations, and document attack paths and business impact for each department report, with travel to multiple client sites as required.