Penetration Tester

Zoho; Albuquerque (NM); On-site; USD 110,000 - 140,000; Full time

Benefits offered by this job

Medical Insurance

Dental Insurance

Vision Insurance

Life & AD&D Insurance

Disability Insurance

Flexible Enrollment with Rippling

Job summary

Securin is an AI-native cybersecurity company in Albuquerque, NM. We perform penetration testing and develop prototype tools to automate security testing and data analytics for enterprise networks and web apps.

Join a team that conducts red-team exercises, leverages MITRE ATT&CK, and collaborates with developers and admins to harden systems. Strong communication and problem-solving are essential.

Qualifications

• 2–5 years of penetration testing and vulnerability assessment experience.
• Experience with web apps, networks, and infrastructure.
• Proficiency in Python, Bash, or Rust scripting.
• Familiarity with attack frameworks and common vulnerabilities (OWASP).
• Ability to communicate findings to technical and non-technical stakeholders.

Responsibilities

• Conduct comprehensive penetration testing and vulnerability assessments on systems, networks, and apps.
• Identify and exploit vulnerabilities using manual and automated methods.
• Analyze test results and document findings for stakeholders.
• Develop and execute detailed test plans and methodologies for pen tests.
• Collaborate with cross-functional teams for remediation strategies.
• Maintain thorough testing documentation and client communications.

Skills

Penetration testing

Vulnerability assessment

Python

Bash

Rust

Kali Linux

Metasploit

Burp Suite

Nmap

Wireshark

OWASP

CWE

Education

Bachelor's degree in Computer Science or InfoSec

Tools

Kali Linux

Metasploit

Burp Suite

Nmap

Wireshark

Job description

Consider joining a leading provider of Tech-enabled cybersecurity solutions in Albuquerque, NM!

Securin is an AI-native cybersecurity company. Our Preemptive Exposure Management Platform turns exposure data into clear decisions — giving organizations the confidence to know which risks are exploitable, what to fix first, and how to act before attackers do.

Job Summary

This position exposes a candidate to the best of both worlds - Penetration Testing as well developing prototype tools to assist in the testing phase. This position includes research and prototype development of automated cyber security testing and security data analytics tools used in the assessment of enterprise network segments and web applications. The selected candidate will also participate in cyber security penetration testing engagements in order to establish subject matter expertise.

Duties and Responsibilities

Conduct comprehensive penetration testing and vulnerability assessments on computer systems, networks, and applications.

Identify and exploit security vulnerabilities through manual testing techniques, automated tools, and other means.

Perform in-depth analysis of test results, documenting and communicating findings to technical and non-technical stakeholders.

Develop and execute detailed test plans and methodologies for conducting penetration tests.

Collaborate with cross-functional teams, including developers, system administrators, and network engineers, to implement remediation strategies and mitigate identified vulnerabilities.

Manage project timelines, deadlines, and expectations – including client interactions

Stay updated on the latest security threats, attack vectors, and penetration testing techniques, and continuously enhance knowledge and skills in the field of information security.

Assist in the development and improvement of security policies, procedures, and guidelines.

Participate in red teaming exercises and simulate real-world attack scenarios to assess the overall security posture of the organization. Having proficient knowledge in MITRE ATT&CK framework.

Maintain accurate and detailed documentation of testing activities, findings, and recommendations.

Prepare reports documenting identified issues based on internal templates.

Interact with clients to deliver results, provide feedback, and remediation recommendations on findings.

Research emerging security topics and new attack vectors

Perform and review the hardening of the systems and network devices.

Supports the team and lead analyst in custom penetration test projects as required.

Participates in required client communication, kick-off calls, data analysis, and findings presentation both remotely and in person.

Assists developers and server administrators on coding best practices, secure configurations, and remediation best practices.

Provides assistance to Operations team for debugging, exploitation and vulnerability analysis.

Contributes to the design of penetration test report deliverables, constantly evaluating effectiveness of report outline.

Requirements

• Candidates must reside in or be within commuting distance of Albuquerque, NM.
• Applicants must be legally authorized to work in the United States and must not require current or future employment visa sponsorship.
• Bachelor's degree in Computer Science, Information Security, or a related field (or equivalent work experience).
• At least 2-5 years of experience in penetration testing and vulnerability assessments, with a focus on web applications, networks, and infrastructure.
• Experienced with programming/scripting languages (e.g.: Python, Bash, Rust)
• In-depth knowledge of various penetration testing tools, frameworks and OS (e.g., Kali Linux, Metasploit, Burp Suite, Nmap, Wireshark, etc.).
• Good understanding of common vulnerabilities and attack vectors (e.g., SQL injection, cross-site scripting, buffer overflows, etc.) and corresponding mitigation techniques.
• Familiarity with industry standards and frameworks such as OWASP top 10, CVE, CWE, SANS, OSSTMM, and NIST.
• Excellent analytical and problem-solving skills, with the ability to think creatively and strategically to find vulnerabilities.
• Effective communication and presentation skills to convey complex technical concepts to both technical and non-technical stakeholders

Culture-Forward Building with AI: What We Expect

Securin is committed to becoming an AI-native organization where GenAI is embedded into how every team works - not just as an occasional assistant, but as a core part of delivery, operations, and how our expertise compounds over time. We expect every employee to actively integrate GenAI tools into daily workflows - automating routine tasks, accelerating research and analysis, drafting documents, and building reusable AI-powered processes for their function. You should understand the limitations of GenAI (including inaccuracies and data sensitivity boundaries), follow data classification rules, and continuously improve your AI proficiency. As you grow, we expect you to move beyond using GenAI to building with it - designing agent workflows, contributing reusable skills, and helping Securin compound its Proactive Exposure Management expertise faster than any competitor can replicate.

• Demonstrated ability to use GenAI tools (e.g., Claude, ChatGPT, etc.) for daily work - drafting, research, summarization, data analysis, code generation, or workflow automation as relevant to the role.
• Working knowledge of GenAI limitations including hallucination risk, context window constraints, and data sensitivity boundaries; ability to validate AI-generated output before acting on it.
• Familiarity with prompt engineering techniques - structuring multi-step instructions, providing context, and iterating on output quality to achieve production-grade results.
• Comfort with agentic AI workflows - using, designing, or building multi-step AI agents that execute tasks autonomously with human-in-the-loop validation.
• Awareness of AI security fundamentals - prompt injection risks, data classification rules, sandboxed execution, and responsible handling of sensitive data in AI workflows.
• Familiarity with connecting GenAI tools to internal data sources, APIs, and enterprise systems.
• Ability to contribute reusable AI skills, templates, agent configurations, or automation workflows to a shared repository for team-wide use.
• Willingness to learn and adopt new AI tools as they evolve; participation in AI adoption sprints, hackathons, and knowledge-sharing within the team.

Preferred qualifications:

GIAC, OSCP, OSEP, HTB Certifications, CEH, CompTIA Pentest+, CRTP, CRTE or any equivalent security certifications are preferred.

• Medical Insurance (Cigna)
• Multiple plan options with low deductibles and competitive rates for individuals and families.
• Dental Insurance (Guardian)
• High and low plan options with 100% coverage for preventive care.
• Vision Insurance (Guardian)
• Coverage for exams, glasses, and contacts with generous allowances.
• Life & AD&D Insurance
• Company-paid basic life insurance; optional supplemental coverage for employees and dependents.
• Short-Term & Long-Term Disability
• Income protection up to 60% of earnings for qualifying disabilities.
• Flexible Enrollment with Rippling
• Easy online platform for managing benefits and life event changes.