Lead Penetration Tester: Advanced App & Cloud Security

OffSeq; United States; Remote; USD 120,000 - 180,000; Full time

Job summary

OffSeq is seeking a lead penetration tester to conduct in-depth assessments across applications, infrastructure, and cloud environments. You will go beyond automated scanning, linking findings into realistic attack paths and helping clients understand remediation steps.

You will scope and lead black-box and white-box tests, create custom exploits and tools, mentor junior testers, and deliver precise reports with actionable guidance. Strong English writing is required.

Qualifications

• 4+ years in penetration testing or offensive security, with leadership experience.
• Strong knowledge of OWASP Top 10 and network/AD attacks.
• Experience with Azure, AWS or GCP.
• Scripting in Python, Bash, or Ruby.
• Hands-on with Burp Suite, Nmap, Metasploit, BloodHound; strong English writing.

Responsibilities

• Scope and lead black-box and white-box tests of web apps, APIs, networks, cloud environments.
• Create custom exploits, scripts and tools to demonstrate impact.
• Investigate results beyond scanners and map to broader risks.
• Write precise, reproducible reports and advise remediation.
• Improve testing methods, tools and quality standards.
• Mentor junior testers and review their work.

Skills

Penetration testing

Cloud security (Azure/AWS/GCP)

Scripting (Python/Bash/Ruby)

Security tooling (Burp Suite, Nmap,Met

Technical writing in English

Tools

Burp Suite

Nmap

Metasploit

BloodHound

Job description

OffSeq is seeking a lead penetration tester to conduct in-depth assessments across applications, infrastructure, and cloud environments. You will go beyond automated scanning, linking findings into realistic attack paths and helping clients understand remediation steps.

You will scope and lead black-box and white-box tests, create custom exploits and tools, mentor junior testers, and deliver precise reports with actionable guidance. Strong English writing is required.