Onsite Internal Penetration Tester: AD & Phishing

Xtreme Solutions Corporate; San Bernardino (CA); On-site; USD 110,000 - 160,000; Full time

Job summary

Xtreme Solutions Corporate is seeking an experienced penetration tester to perform internal network evaluations from controlled footholds, simulating unauthorized internal access across County facilities. You will test servers, workstations, endpoints, and password strength, documenting attack paths and impact for each department.

The role requires hands-on testing, on-site presence at client facilities, and the ability to operate within HIPAA/Government-like environments.

Qualifications

• 4+ years of internal/network penetration testing experience, including Active Directory attack paths.
• Comfort working onsite at client facilities, including data centers and administrative offices.
• Experience with internal recon and lateral movement tooling (BloodHound, Responder, or equivalent).

Responsibilities

• Physically connect to County network ports to simulate an unauthenticated internal attacker.
• Simulate a successful phishing/Trojan compromise from an authenticated workstation foothold.
• Attempt password cracking and lateral movement while evading department detection and response efforts.
• Document internal attack paths, exploited vulnerabilities, and business impact for each department report.

Skills

Penetration testing

Active Directory attack paths

Tools

BloodHound

Responder

Job description

Xtreme Solutions Corporate is seeking an experienced penetration tester to perform internal network evaluations from controlled footholds, simulating unauthorized internal access across County facilities. You will test servers, workstations, endpoints, and password strength, documenting attack paths and impact for each department.

The role requires hands-on testing, on-site presence at client facilities, and the ability to operate within HIPAA/Government-like environments.