Offensive Security Engineer/Penetration Tester

Jobot; Newport (RI); On-site; USD 83,000 - 94,000; Full time

Job summary

Jobot is seeking a seasoned cybersecurity professional to lead hands-on penetration testing across applications, networks, and infrastructure. You will perform both manual and automated assessments, identify exploitable vulnerabilities, and develop remediation recommendations while collaborating with engineering and security teams.

The role emphasizes practical offensive security work, threat analysis, and reporting to stakeholders.

Qualifications

• Professional experience in penetration testing, ethical hacking, offensive security, or related cybersecurity disciplines.
• Strong understanding of network protocols, operating systems, application security, and common attack techniques.
• Experience conducting both manual penetration testing and automated vulnerability assessments.
• Familiarity with offensive security methodologies, red team exercises, and adversary simulation.
• Understanding of OWASP Top 10, MITRE ATT&CK, and industry-standard security testing methodologies.
• Hands-on experience with security testing tools such as Burp Suite, Metasploit, Nmap, Nessus, or comparable technologies.
• Ability to identify, validate, and explain security vulnerabilities and potential attack paths.
• Experience preparing technical documentation and actionable remediation recommendations.
• Strong analytical, troubleshooting, and communication skills.
• Preferred Certifications: OSCP, GPEN, GWAPT, CEH or comparable credentials.
• Experience conducting penetration testing within enterprise technology environments.
• Familiarity with cloud security testing across AWS, Azure, or Google Cloud.
• Scripting or automation experience with Python, PowerShell, Bash, or similar languages.
• Exposure to vulnerability management, security assessments, or broader cybersecurity risk reduction initiatives.

Responsibilities

• Plan and execute manual and automated penetration testing engagements across applications, networks, systems, and infrastructure.
• Conduct security assessments to identify exploitable vulnerabilities, misconfigurations, and weaknesses in existing security controls.
• Participate in red team exercises and simulated attack scenarios to evaluate security defenses.
• Analyze potential attack paths and assess vulnerabilities based on exploitability, likelihood, and potential business impact.
• Develop comprehensive penetration testing reports, including technical findings, risk assessments, and actionable remediation recommendations.
• Collaborate with infrastructure, engineering, development, and security teams to address identified vulnerabilities.
• Conduct validation testing to confirm the effectiveness of remediation efforts.
• Research emerging threats, attack techniques, vulnerabilities, and offensive security tools.
• Support ongoing security improvement initiatives designed to reduce risk and strengthen defensive capabilities.
• Present findings and recommendations to technical and nontechnical stakeholders.

Skills

Penetration testing

Ethical hacking

Offensive security

Red team concepts

Vulnerability assessment

Tools

Burp Suite

Metasploit

Nmap

Nessus

Job description

A bit about us:

We are an established organization seeking to expand our cybersecurity capabilities and strengthen our approach to identifying, assessing, and mitigating security risks. Our technology environment offers a wide range of technical challenges and opportunities to work with modern security tools, evolving technologies, and complex systems. We value individuals who are proactive, technically curious, and passionate about cybersecurity. Our team takes a collaborative, hands–on approach to identifying vulnerabilities and implementing meaningful security improvements.

Why join us?

Hands–On Technical Work: Take an active role in penetration testing, offensive security assessments, and identifying exploitable vulnerabilities.

Variety of Security Challenges: Work across applications, networks, infrastructure, and modern technology environments.

Collaborative Culture: Partner with experienced security professionals and technical teams to identify risks and improve security controls.

Opportunity for Impact: Contribute directly to strengthening organizational security through actionable findings and remediation efforts.

Professional Growth: Gain exposure to evolving attack techniques, security technologies, and offensive security methodologies.

Job Details Key Responsibilities

• Plan and execute manual and automated penetration testing engagements across applications, networks, systems, and infrastructure.
• Conduct security assessments to identify exploitable vulnerabilities, misconfigurations, and weaknesses in existing security controls.
• Participate in red team exercises and simulated attack scenarios to evaluate security defenses.
• Analyze potential attack paths and assess vulnerabilities based on exploitability, likelihood, and potential business impact.
• Develop comprehensive penetration testing reports, including technical findings, risk assessments, and actionable remediation recommendations.
• Collaborate with infrastructure, engineering, development, and security teams to address identified vulnerabilities.
• Conduct validation testing to confirm the effectiveness of remediation efforts.
• Research emerging threats, attack techniques, vulnerabilities, and offensive security tools.
• Support ongoing security improvement initiatives designed to reduce risk and strengthen defensive capabilities.
• Present findings and recommendations to technical and nontechnical stakeholders.

Qualifications & Technical Skills

Professional experience in penetration testing, ethical hacking, offensive security, or related cybersecurity disciplines.

Strong understanding of network protocols, operating systems, application security, and common attack techniques.

Experience conducting both manual penetration testing and automated vulnerability assessments.

Familiarity with offensive security methodologies, red team exercises, and adversary simulation.

Understanding of OWASP Top 10, MITRE ATT&CK, and industry–standard security testing methodologies.

Hands–on experience with security testing tools such as Burp Suite, Metasploit, Nmap, Nessus, or comparable technologies.

Ability to identify, validate, and explain security vulnerabilities and potential attack paths.

Experience preparing technical documentation and actionable remediation recommendations.

Strong analytical, troubleshooting, and communication skills.

Preferred Qualifications Certifications such as OSCP, GPEN, GWAPT, CEH, or comparable credentials.

Experience conducting penetration testing within enterprise technology environments.

Familiarity with cloud security testing across AWS, Azure, or Google Cloud.

Scripting or automation experience with Python, PowerShell, Bash, or similar languages.

Exposure to vulnerability management, security assessments, or broader cybersecurity risk reduction initiatives.

Salary: $60 – $68.5 per hour

Jobot is an Equal Opportunity Employer. We provide an inclusive work environment that celebrates diversity and all qualified candidates receive consideration for employment without regard to race, color, sex, sexual orientation, gender identity, religion, national origin, age (40 and over), disability, military status, genetic information or any other basis protected by applicable federal, state, or local laws.

Jobot also prohibits harassment of applicants or employees based on any of these protected categories. It is Jobot's policy to comply with all applicable federal, state and local laws respecting consideration of unemployment status in making hiring decisions.

Sometimes Jobot is required to perform background checks with your authorization. Jobot will consider qualified candidates with criminal histories in a manner consistent with any applicable federal, state, or local law regarding criminal backgrounds, including but not limited to the Los Angeles Fair Chance Initiative for Hiring and the San Francisco Fair Chance Ordinance.