Mid-Level Penetration Test Engineer

tervax.com; United States; Remote; USD 3,600 - 6,000; Full time

Benefits offered by this job

Remote from Turkey

Full-time role

Job summary

tervax.com is seeking an experienced penetration tester to independently perform security assessments across cloud, mobile, and blockchain domains. You will manage scoping, testing, and reporting, while guiding junior staff and communicating findings to diverse audiences.

The role emphasizes practical testing expertise, strong reporting, and the ability to lead small projects with minimal supervision from a remote setup.

Qualifications

• At least three years of penetration testing or offensive security experience.
• A professional certification such as OSCP, OSCE, or an equivalent qualification.
• A record of discovering serious vulnerabilities.
• Strong knowledge of networking protocols and security.
• Experience with both manual and automated testing methods.
• Clear report-writing and client communication skills, plus the ability to lead small projects independently.

Responsibilities

• Plan and conduct comprehensive penetration tests independently.
• Lead projects from scoping through final reporting.
• Develop custom tools or exploit code when an assessment calls for it.
• Mentor junior team members and contribute to internal training materials.
• Present assessment results to technical and non-technical stakeholders.
• Share useful methods and findings in the internal knowledge base.

Skills

Penetration testing

Offensive security

Certifications (OSCP/OSCE)

Networking security

Manual testing

Automated testing

Reporting

Client communication

Project leadership

Job description

Role overview

Independently deliver security assessments across areas such as cloud infrastructure, mobile applications, and blockchain systems. The work spans the full engagement lifecycle, from defining assessment scope through testing and reporting, with opportunities to guide junior colleagues and communicate findings to varied audiences.

Responsibilities

• Plan and conduct comprehensive penetration tests independently.
• Lead projects from scoping through final reporting.
• Develop custom tools or exploit code when an assessment calls for it.
• Mentor junior team members and contribute to internal training materials.
• Present assessment results to technical and non-technical stakeholders.
• Share useful methods and findings in the internal knowledge base.

Requirements

• At least three years of penetration testing or offensive security experience.
• A professional certification such as OSCP, OSCE, or an equivalent qualification.
• A record of discovering serious vulnerabilities.
• Strong knowledge of networking protocols and security.
• Experience with both manual and automated testing methods.
• Clear report-writing and client communication skills, plus the ability to lead small projects independently.

Nice to have

• Further certifications such as OSWE, OSEP, or GXPN.
• Smart contract auditing experience, especially with Solidity.
• Cloud security certifications or mobile application security experience.
• Contributions to security tools or published vulnerability disclosures such as CVEs.

Benefits and work setup

• Full-time role, remote from Turkey.