Penetration Tester / Ethical Hacker

Cybersecurity Jobs; New York (NY); Remote; USD 80,000 - 113,000; Full time

Job summary

Cybersecurity Jobs is seeking an experienced security professional in New York with hands-on penetration testing, red teaming, and ethical hacking experience. You will plan and execute tests across web apps, APIs, mobile apps, networks, and cloud environments, using both manual methods and automated tooling.

Strong scripting and tooling experience is essential. Work includes building AI-driven testing workflows, conducting threat-informed assessments, and delivering executive-ready reports.

Qualifications

• 3+ years of direct experience performing penetration testing, red teaming, or ethical hacking in an active corporate environment.

Responsibilities

• Plan and execute penetration tests across web applications, APIs, mobile apps, networks, cloud infrastructure, and internal systems.
• Perform manual exploitation and vulnerability validation to reduce false positives and uncover logic flaws automated tooling may miss.
• Design, configure, and run automated vulnerability scanning pipelines to increase coverage and consistency across engagements.
• Build and deploy AI-agent-driven testing workflows to accelerate reconnaissance, fuzzing, exploit chaining, and report generation.
• Run red team engagements simulating APT tactics, techniques, and procedures (TTPs), with tracking and documented activity.

Skills

Penetration testing

Red teaming

Ethical hacking

Python scripting

PowerShell

Golang

Networking knowledge

Tools

Burp Suite

Metasploit

Nmap

Wireshark

Cobalt Strike

BloodHound

Kali Linux

Job description

Support global information security effectiveness through penetration testing and red team engagements across modern environments.

Responsibilities

• Plan and execute penetration tests across web applications, APIs, mobile apps, networks, cloud infrastructure (AWS, Azure, GCP), and internal systems.
• Perform manual exploitation and vulnerability validation to reduce false positives and uncover logic flaws automated tooling may miss.
• Design, configure, and run automated vulnerability scanning pipelines to increase coverage and consistency across engagements.
• Build and deploy AI-agent-driven testing workflows to accelerate reconnaissance, fuzzing, exploit chaining, and report generation.
• Run red team engagements simulating APT tactics, techniques, and procedures (TTPs), with tracking and documented activity.

Requirements

• 3+ years of direct experience performing penetration testing, red teaming, or ethical hacking in an active corporate environment.
• Ability to plan and execute penetration tests and red team engagements, including comfort operating in terminal environments.
• Working knowledge of common networking protocols: HTTP, DNS, SMB, and related fundamentals.
• Familiarity with Windows and Linux systems.
• Proficiency with cross-platform scripting languages such as Python or Golang, and PowerShell.
• Hands-on experience with industry-standard tools including Burp Suite, Metasploit, Nmap, Wireshark, Cobalt Strike, BloodHound, and the Kali Linux toolset.

Tech Stack

• Cloud: AWS, Azure, GCP
• Scripting: Python, Golang, PowerShell
• Security testing tools: Burp Suite, Metasploit, Nmap, Wireshark, Cobalt Strike, BloodHound, Kali Linux
• Protocols: HTTP, DNS, SMB

Location and Work Details

• Location: New York, NY (remote)
• Timezone: Remote (EST hours)
• Salary: USD 70 per hour
• Employment type: W-2 only

What’s In It For Me?

• Drive real security value by improving the effectiveness of information security capabilities across business units.
• Work on advanced testing approaches combining manual exploitation with automated scanning and AI-agent-driven workflows.
• Perform threat-informed testing by analyzing cyber threat intelligence for actionable takeaways.
• Create executive-ready and client-ready documentation via executive summaries and in-depth technical reporting.
• Collaborate with teams by translating testing objectives and findings into plain English and actionable remediation guidance.