Penetration Tester

Harvey Nash; Frankfort (KY); On-site; USD 80,000 - 100,000; Full time

Job summary

A cybersecurity firm is seeking a candidate experienced in penetration testing and red/purple teaming. The ideal applicant will have strong communication skills, multitasking abilities, and experience with various operating systems. This role involves performing vulnerability assessments and collaborating with project managers to enhance application security. A degree and relevant security certifications are strongly desired.

Qualifications

• Experience in penetration testing/red-teaming.
• Ability to execute full-cycle engagements independently and as part of a team.
• Impeccable verbal and written communication skills.

Responsibilities

• Perform network penetration tests and vulnerability assessments.
• Work with project managers to identify threats and vulnerabilities.
• Provide technical expertise in the delivery of security solutions.

Skills

Penetration testing

Red/purple teaming

Vulnerability assessments

Communication skills

Operating systems (Windows, Linux)

Networking concepts

Basic scripting

Education

Bachelor's degree in a related field

Security certifications (OSEP, OSCE, OSCP, OSWE)

Job description

As a member of the team, they will be tasked with performing a variety of engagements, including network penetration tests, red/purple teaming, wireless assessments, web-application penetration tests, and more. To be considered for the position, candidates must be experienced in penetration testing/red‑teaming and performing vulnerability assessments manually. The candidate must have impeccable communication skills (verbal and written), along with the ability to execute full‑cycle engagements independently and as part of a team using industry standard tradecraft. Experience with multiple operating systems (e.g., Windows, Linux, etc.), networking concepts, and basic scripting is required.

This position is required to work with project managers, developers, and management to help identify threats and vulnerabilities in applications and business processes. They will provide high‑level technical expertise and leadership in the development and delivery of security solutions. They will provide research and development activities, especially for the emerging technologies, technology assistance and direction to other teams ensuring that all technologies work effectively together. They will be responsible for identifying and managing risks and issues association with the securing of application or selection of CABINETS solutions.

Candidates for this position will undergo a CTF (capture the flag) scenario in order to gauge their experience and understanding of this position. Once candidates are selected, they will be provided access to the CTF environment and will be given a limited amount of time to complete the exercise. The experience noted during this exercise will identify the rate that can be provided for this position. While not required, a bachelor’s degree in a related field and/or security certifications such as OSEP, OSCE, OSCP, and OSWE are strongly desired.