Penetration Tester

Cybersecurity Jobs; Urbandale (IA); On-site; USD 85,000 - 120,000; Full time

Job summary

Tenax Software Solutions is seeking a mid-level penetration tester for onsite consulting in Urbandale, IA. You will deliver offensive security testing across networks, web apps, cloud, wireless, physical, and AI systems, and lead kickoff calls with clients.

You will communicate risks and remediation clearly, write detailed reports, and support engagements end-to-end, including progress updates and report reviews with stakeholders.

Qualifications

• Associate’s degree in Information Technology, Cybersecurity, or a related field.
• 2–5 years of IT/Cybersecurity experience.
• Solid understanding of networking, operating systems, web technologies, and cybersecurity concepts.
• Knowledge of common attack techniques, exploitation methods, and vulnerabilities.
• Ability to use offensive security tools safely and effectively.
• Strong written and verbal communication skills.
• Strong documentation, organization, and time-management skills.
• Ability to work independently within approved scope and methodology.
• Ability to collaborate with consultants, project managers, and client stakeholders.

Responsibilities

• Lead kickoff calls and participate in technical discussions.
• Produce clear, comprehensive penetration testing and vulnerability reports.
• Document findings with evidence and remediation recommendations.
• Participate in internal QA reviews.

Skills

Networking

Operating systems

Web technologies

Cybersecurity concepts

Written communication

Time-management

Independent work

Collaboration

Professional judgment

Education

Associate’s degree in IT or Cybersecurity

Tools

Burp Suite

Nmap

BloodHound

Impacket

Metasploit

Vulnerability scanners

OWASP

MITRE ATT&CK

NIST

PTES

Job description

Tenax Software Solutions is seeking a mid-level penetration tester for onsite consulting in Urbandale, IA. In this role, you’ll help clients improve security by delivering thorough offensive security testing across a wide range of environments, from networks and web applications to cloud, wireless, physical, and AI systems. You’ll also play an active part in client communication, leading kickoff and technical discussions, and producing clear, comprehensive reports with actionable remediation guidance.

What you’ll do

• Perform AI penetration tests and configuration reviews
• Conduct cloud penetration tests and configuration reviews
• Execute external network penetration tests and vulnerability assessments
• Run internal network penetration tests and vulnerability assessments
• Carry out physical penetration tests
• Complete social engineering assessments
• Deliver web application penetration tests
• Conduct wireless penetration tests and vulnerability assessments
• Provide other offensive security services offered by Tenax Solutions as assigned

You’ll also support each engagement end to end by leading kickoff calls, participating in technical discussions, reviewing findings in report review meetings, and providing timely updates on testing progress, blockers, and critical issues.

• Explain vulnerabilities, attack paths, remediation recommendations, and security risks in clear terms
• Write clear and comprehensive penetration testing and vulnerability assessment reports
• Document findings with technical details, supporting evidence, and remediation recommendations
• Participate in internal quality assurance reviews

Tools and frameworks you may use

• OWASP, MITRE ATT&CK, NIST, PTES
• Burp Suite, Nmap, BloodHound, Impacket, Metasploit, and vulnerability scanners

Required qualifications

• Associate’s degree in Information Technology, Cybersecurity, or another relevant field
• 2–5 years of experience in Information Technology, Cybersecurity, or a related field
• Solid understanding of networking, operating systems, web technologies, and cybersecurity concepts
• Knowledge of common attack techniques, exploitation methods, and vulnerabilities
• Ability to use offensive security tools safely and effectively
• Strong written and verbal communication skills
• Strong documentation, organization, and time-management skills
• Ability to work independently while following approved scope and methodology
• Ability to collaborate with consultants, project managers, and client stakeholders
• Demonstrated professional judgment handling sensitive systems, data, and client communications

Preferred skills

• Experience conducting penetration tests of internal and external networks, Active Directory, web applications, and cloud environments
• Familiarity with common penetration testing methodologies and security frameworks, including OWASP, MITRE ATT&CK, NIST, and PTES
• Experience using offensive security tools such as Burp Suite, Nmap, BloodHound, Impacket, Metasploit, and vulnerability scanners
• Relevant industry certifications such as Security+, PenTest+, PNPT, CPTS, CEH, or OSCP
• Experience identifying vulnerabilities, developing attack paths, and providing actionable remediation recommendations

Working conditions and expectations

• Occasional non-standard hours may be required based on client needs, testing windows, or emergency requests
• Some engagements may involve remote work, virtual meetings, or travel
• Ability to respond professionally to time-sensitive client needs
• Comfort working in dynamic client environments with changing priorities and timelines
• All work performed in accordance with company policies, client authorization, and applicable laws