Penetration Tester: Cloud, Web & Network Security

Taylor Corporation; Riverbend Estates (MN); On-site; USD 97,000 - 120,000; Full time

Job summary

Taylor Corporation is seeking a Penetration Tester to perform tests across network, application, cloud, and wireless environments, including segmentation testing. The role involves designing tests, analyzing findings, reporting results, and advising on remediation.

Strong hands-on expertise with Windows/Linux, networks, cloud, and secure development is required. Responsibilities include coordinating testing with stakeholders, following standards like OWASP, NIST, PCI DSS, and documenting

Qualifications

• Minimum three years of hands-on penetration testing in enterprise environments.
• Experience with common pen-testing tools (Nmap, Burp Suite, Nessus, Metasploit).
• Knowledge of testing methodologies and secure development principles.
• Hands-on experience with Windows, Linux, AD, and cloud platforms.

Responsibilities

• Design and perform internal and external network, web app, API, cloud, wireless, and segmentation tests.
• Identify vulnerabilities, attack paths, and remediation options.
• Create detailed technical reports and concise executive summaries.
• Develop and maintain penetration test procedures and templates.
• Review reports and provide input on findings from other testers.
• Communicate risk and remediation strategies to stakeholders.

Skills

Collaboration

Communication

Analytical thinking

Problem solving

Self-direction

Education

Penetration testing certification (OSCP/PNPT/GPen/etc.)

Tools

Nmap

Burp Suite Pro

HCL AppScan

Nessus

Metasploit

Kali Linux

Job description

Taylor Corporation is seeking a Penetration Tester to perform tests across network, application, cloud, and wireless environments, including segmentation testing. The role involves designing tests, analyzing findings, reporting results, and advising on remediation.

Strong hands-on expertise with Windows/Linux, networks, cloud, and secure development is required. Responsibilities include coordinating testing with stakeholders, following standards like OWASP, NIST, PCI DSS, and documenting