Offensive Security Engineer/Penetration Tester

Jobot; New York (NY); À distance; USD 83 000 - 94 000; Plein temps

Résumé du poste

Jobot is seeking an Offensive Security Engineer/Penetration Tester in New York, NY. The role involves hands-on penetration testing across applications, networks, and infrastructure, with goal of identifying exploitable vulnerabilities and advising remediation.

You will collaborate with security and engineering teams, contribute to red team exercises, and produce detailed reports with risk assessments and actionable recommendations. Remote work is available as part of our consulting engagements.

Qualifications

• Professional experience in penetration testing, ethical hacking, offensive security, or related cybersecurity disciplines.

Responsabilités

• Plan and execute manual and automated penetration testing engagements across applications, networks, systems, and infrastructure.
• Conduct security assessments to identify exploitable vulnerabilities, misconfigurations, and weaknesses in existing security controls.
• Participate in red team exercises and simulated attack scenarios to evaluate security defenses.
• Analyze potential attack paths and assess vulnerabilities based on exploitability, likelihood, and potential business impact.
• Develop comprehensive penetration testing reports, including technical findings, risk assessments, and actionable remediation recommendations.
• Collaborate with infrastructure, engineering, development, and security teams to address identified vulnerabilities.
• Conduct validation testing to confirm the effectiveness of remediation efforts.
• Research emerging threats, attack techniques, vulnerabilities, and offensive security tools.
• Support ongoing security improvement initiatives designed to reduce risk and strengthen defensive capabilities.
• Present findings and recommendations to technical and nontechnical stakeholders.

Connaissances

Penetration testing

Offensive security

Red team

Burp Suite

Metasploit

Nmap

Nessus

Vulnerability assessment

Security tooling

Analytical thinking

Outils

Burp Suite

Metasploit

Nmap

Nessus

Description du poste

Offensive Security Engineer/Penetration Tester

$60 - $68.5 per hour | New York, NY | Remote | Consulting

A bit about us:

We are an established organization seeking to expand our cybersecurity capabilities and strengthen our approach to identifying, assessing, and mitigating security risks. Our technology environment offers a wide range of technical challenges and opportunities to work with modern security tools, evolving technologies, and complex systems.

We value individuals who are proactive, technically curious, and passionate about cybersecurity. Our team takes a collaborative, hands‑on approach to identifying vulnerabilities and implementing meaningful security improvements.

Why join us?

• Hands‑On Technical Work: Take an active role in penetration testing, offensive security assessments, and identifying exploitable vulnerabilities.
• Variety of Security Challenges: Work across applications, networks, infrastructure, and modern technology environments.
• Collaborative Culture: Partner with experienced security professionals and technical teams to identify risks and improve security controls.
• Opportunity for Impact: Contribute directly to strengthening organizational security through actionable findings and remediation efforts.
• Professional Growth: Gain exposure to evolving attack techniques, security technologies, and offensive security methodologies.

Job Details

• Plan and execute manual and automated penetration testing engagements across applications, networks, systems, and infrastructure.
• Conduct security assessments to identify exploitable vulnerabilities, misconfigurations, and weaknesses in existing security controls.
• Participate in red team exercises and simulated attack scenarios to evaluate security defenses.
• Analyze potential attack paths and assess vulnerabilities based on exploitability, likelihood, and potential business impact.
• Develop comprehensive penetration testing reports, including technical findings, risk assessments, and actionable remediation recommendations.
• Collaborate with infrastructure, engineering, development, and security teams to address identified vulnerabilities.
• Conduct validation testing to confirm the effectiveness of remediation efforts.
• Research emerging threats, attack techniques, vulnerabilities, and offensive security tools.
• Support ongoing security improvement initiatives designed to reduce risk and strengthen defensive capabilities.
• Present findings and recommendations to technical and nontechnical stakeholders.

Qualifications & Technical Skills

• Professional experience in penetration testing, ethical hacking, offensive security, or related cybersecurity disciplines.
• Strong understanding of network protocols, operating systems, application security, and common attack techniques.
• Experience conducting both manual penetration testing and automated vulnerability assessments.
• Familiarity with offensive security methodologies, red team exercises, and adversary simulation.
• Understanding of OWASP Top 10, MITRE ATT&CK, and industry-standard security testing methodologies.
• Hands‑on experience with security testing tools such as Burp Suite, Metasploit, Nmap, Nessus, or comparable technologies.
• Ability to identify, validate, and explain security vulnerabilities and potential attack paths.
• Experience preparing technical documentation and actionable remediation recommendations.
• Strong analytical, troubleshooting, and communication skills.

Preferred Qualifications

• Certifications such as OSCP, GPEN, GWAPT, CEH, or comparable credentials.
• Experience conducting penetration testing within enterprise technology environments.
• Familiarity with cloud security testing across AWS, Azure, or Google Cloud.
• Scripting or automation experience with Python, PowerShell, Bash, or similar languages.
• Exposure to vulnerability management, security assessments, or broader cybersecurity risk reduction initiatives.

Jobot is an Equal Opportunity Employer. We provide an inclusive work environment that celebrates diversity and all qualified candidates receive consideration for employment without regard to race, color, sex, sexual orientation, gender identity, religion, national origin, age (40 and over), disability, military status, genetic information or any other basis protected by applicable federal, state, or local laws. Jobot also prohibits harassment of applicants or employees based on any of these protected categories. It is Jobot’s policy to comply with all applicable federal, state and local laws respecting consideration of unemployment status in making hiring decisions.

Sometimes Jobot is required to perform background checks with your authorization. Jobot will consider qualified candidates with criminal histories in a manner consistent with any applicable federal, state, or local law regarding criminal backgrounds, including but not limited to the Los Angeles Fair Chance Initiative for Hiring and the San Francisco Fair Chance Ordinance.