Penetration Tester

Arena Technical Resources, LLC; United States; Remote; USD 110,000 - 170,000; Full time

Job summary

Arena Technical Resources, LLC is seeking a Penetration Tester for a remote opportunity requiring ability to obtain and maintain a Public Trust clearance. The role expects strong experience with Burp Suite, Kali Linux, Metasploit Pro, and Cobalt Strike, plus scripting in Python or PowerShell.

Candidates should be comfortable with red/purple team activities, PCI-DSS testing, and communicating security findings effectively. U.S. residency and background screening apply.

Qualifications

• Prior experience with Burp Suite Professional or similar DAST tools.
• Experience with AI and penetration testing AI.
• Experience with Kali Linux and tools in the distro for pentesting.
• Experience with Metasploit Pro and Cobalt Strike for red team ops.
• Experience with Red Team engagements from planning to execution.
• Experience with phishing to gain access for lateral movement.
• Experience with Purple Team engagements to test monitoring controls.
• Scripting in Python and/or PowerShell.
• Experience with PCI-DSS penetration testing.
• Technical writing to communicate vulnerabilities clearly.
• Familiar with ASVS and MITRE ATT&CK framework.
• Penetration testing certification recommended (OCSP, GPEN, GWAPT, GXPN).

Skills

Burp Suite Pro

Kali Linux

Metasploit Pro

Cobalt Strike

Python

PowerShell

Red Team operations

Phishing simulations

MITRE ATT&CK

ASVS

Education

Bachelor's Degree in Computer Science or related field

Tools

OWASP ASVS

PCI-DSS testing

Job description

Job Title: Penetration Tester
Job Location: Remote
Eligibility/Clearance: Ability to obtain and maintain a Public Trust
clearance and successfully pass a thorough Government background
screening process requiring the completion of detailed forms and
fingerprinting.

This position has a U.S. residency requirement. The USPS security
clearance process requires the selected candidate to have resided in the U.S. (including U.S. Territories) for the last five years as follows:

• - U.S. Citizens cannot have left the U.S. (including U.S. Territories)
  for longer than 6 months consecutively in the last 3 years (unless
  they meet certain exceptions).
• - Non-U.S. Citizens cannot have left the U.S. (including U.S.
  Territories) for longer than 90 days consecutively in the last 3
  years.

WHAT YOU’LL NEED TO SUCCEED:

Education:

• Bachelor's Degree in Computer Science or related technical
  discipline, preferred but not required.
• NOTE: If resources do not have a relevant college degree, an
  additional 4 years of relevant work experience is required.

Required Experience:

• Prior experience with Burp Suite Professional, or other similar DAST
  tools
• Experience with AI and penetration testing AI
• Experience with Kali Linux and most of the tools available in the
  distro for penetration testing
• Experience with tools such as Metasploit Pro and Cobalt Strike for
  red team operations
• Experience with Red Team engagements from planning to execution
• Experience with phishing network users to gain access for lateral
  movement on the network
• Experience with Purple Team engagements to test monitoring controls
  in coordination with engineering teams and CSOC teams.
• Proficiency in scripting, such as Python and/or PowerShell
• Experience with penetration testing supporting PCI-DSS
• Technical writing skills, along with ease in communicating concepts
  related to security vulnerabilities and attack path scenarios.
• Familiar with OWASP Application Security Verification Standard
  (ASVS) and MITRE ATT&CK framework
• Penetration testing certification recommended. Acceptable
  certifications: Offensive Security Certified Professional (OCSP),
  Global Information Assurance Certification (GIAC) Certifications
  (e.g., GIAC Certified Penetration Tester (GPEN), GIAC Web
  Application Penetration Tester (GWAPT), or GIAC Exploit Researcher
  and Advanced Penetration Tester (GXPN))

Arena Technical Resources, LLC (ATR) is an Equal Opportunity Employer
(EOE) who will provide equal employment opportunity to employees and
applicants for employment without regard to race, ethnicity, religion,
color, sex, pregnancy, national origin, age, veteran status, ancestry,
sexual orientation, gender identity or expression, marital status,
family structure, genetic information, or mental or physical disability.