Lead Penetration Tester

Infinite Ranges; United States; Remote; USD 138,000 - 248,000; Part time

Job summary

Infinite Ranges is seeking an experienced Lead Penetration Tester for a high-impact, fully remote project lasting about 12-15 weeks (≈140 hours). The role focuses on offensive security—building, scripting, and executing attack scenarios across modern IT environments.

You’ll work hands-on with both physical and virtual targets, develop attack chains, and guide red team exercises to improve cyber readiness. The ideal candidate has 5+ years in penetration testing or red team work, deep knowledge of

Qualifications

• 5+ years of experience in penetration testing, ethical hacking, or red team operations.
• Strong understanding of MITRE ATT&CK, IC ATT&CK, and OWASP frameworks.
• Comfort using offensive security tools and scripting for automation.
• Ability to document complex attacks with clear objectives and results for technical and non-technical audiences.
• Ability to lead and train Red Teams on attack vectors and APTs.

Responsibilities

• Develop and execute penetration testing campaigns targeting various infrastructure devices.
• Simulate multi-phase attack chains including lateral movement and privilege escalation.
• Create custom exploits, payloads, and evasion techniques against assets.
• Lead red team exercises and script repeatable scenarios with measurable impact.
• Document post-exercise findings, attack graphs, and defensive recommendations.
• Participate in workshops and live events to demonstrate adversarial tactics.

Skills

5+ years

MITRE ATT&CK

OWASP

Scripting

Red Team Leadership

Tools

Metasploit

Cobalt Strike

Kali Linux

Impacket

Responder

nmap

BloodHound

Maltego

Burp Suite

Job description

Penetration tester

In the game of life, are you stuck on level "Meh"? Why not unlock a legendary career move with us at Infinite Ranges!

Let me spill the tea- Infinite Ranges stands on the cutting edge of deploying, implementing, and custom consulting for tailored Cybersecurity, application modernization and DevSecOps solutions. In under 48 months, we’ve grown to 60+ OEM partners, a staff of over 50, and hundreds of engagements, delivering both people and professional services at-scale.

About the Role:

This specific project is supposed to last about 12-15 weeks and total of 140hrs give or take, fully remote.

Infinite Ranges is seeking an experienced and creative Lead Penetration Tester to join a high-impact engagement. This role is all about offensive security—building, scripting, and executing attack scenarios across a multitude of modern IT environments.

You’ll work hands-on with physical and virtual targets, execute/develop complex attack chains, and lead red team exercises. This is a unique opportunity to apply your offensive toolkit in a high-fidelity environment and leave a lasting impact on cyber readiness.

What You Will Be Doing:

• Develop and execute penetration testing campaigns targeting various infrastructure devices.
• Simulate realistic, multi-phase attack chains including lateral movement, privilege escalation, and multiple specific threat vectors.
• Create custom exploits, payloads, and evasion techniques against emulated and physical assets.
• Work closely with scenario designers to script repeatable red team exercises with measurable impact.
• Conduct threat emulation using TTPs based on real-world APTs and adversaries.
• Define offensive toolkits and infrastructure within the environment.
• Document post-exercise findings, attack graphs, and defensive recommendations.
• Participate in workshops and live events to demo adversarial behavior and tactics.

What We Want To See:

• 5+ years of experience in penetration testing, ethical hacking, or red team operations.
• Strong understanding of the MITRE ATT&CK and IC ATT&CK, and OWASP frameworks.
• Comfort using offensive security tools
• Proficiency with scripting and automation in multiple languages.
• Ability to document complex attacks with clear objectives and results for both technical and non-technical audiences.
• Ability to lead and train Red Teams on attack vectors, attacks ,and APTs

Technologies Used in This Role:

• Offensive Tools: Metasploit, Cobalt Strike, Kali Linux, Impacket, Responder, nmap, BloodHound, Maltego, Burp Suite
• Scripting: Python, Bash, PowerShell, VBA
• Platforms: GCP, AWS, VMware, Azure, Docker, Windows, Mac, Linux
• Vulnerability Analysis: Tenable, Greenbone OpenVAS, Qualys

Bonus Points For:

• Certifications like OSCP, OSEP, GPEN, GXPN, or GRPT
• Experience simulating APT behavior and running attack plans
• Familiarity with threat intelligence integration
• Background in industrial or manufacturing cybersecurity
• Experience mentoring or coaching blue teams
• Familiarity with IC/OT environments (e.g., SCADA, PLCs, HMIs, industrial protocols).