Penetration Tester - Infrastructure & Red Team

Packetlabs Ltd.; United States; Remoto; USD 110.000 - 170.000; Tempo pieno

Descrizione del lavoro

Packetlabs Ltd. is seeking an experienced Ethical Hacker to join our infrastructure security practice. You will lead and execute penetration tests across on‑premises, cloud, and hybrid environments, and simulate adversary activity to reveal real‑world risks.

You will deliver clear technical reports, present findings to clients, and mentor junior consultants while helping advance our tooling and standards in offensive security.

Competenze

• 3+ years of professional experience performing infrastructure penetration testing, red teaming, adversary simulation, or offensive security consulting.
• Experience testing Windows, Linux, Active Directory, Entra ID, cloud platforms, and enterprise networking.
• Experience with internal and external network penetration testing, privilege escalation, AD security assessments, and lateral movement testing.
• Cloud experience with AWS, Azure, or Google Cloud Platform.
• Certs such as OSCP, OSEP, CRTO, etc. are assets; OSCP strongly preferred.

Mansioni

• Plan and execute infrastructure penetration testing across on‑premises, hybrid, cloud, wireless, and enterprise networks.
• Perform internal/external testing to identify and exploit vulnerabilities using manual methods and tools.
• Assess AD, Entra ID, Windows/Linux, virtualization, cloud services, and supporting infrastructure.
• Evaluate cloud environments (AWS, Azure, GCP) for configuration weaknesses and risks.
• Assess containerized environments, Kubernetes, CI/CD, and cloud-native tech where applicable.
• Prepare technical reports, present findings to clients, and provide remediation guidance.
• Maintain expertise in offensive security methodologies and contribute to tooling and service improvements.

Conoscenze

Infrastructure testing

Adversary simulation

Cloud security

Active Directory

Penetration testing

Technical writing

Client communication

Formazione

Bachelor’s degree in Cybersecurity/CS/IT

Descrizione del lavoro

We are a passionate team of highly trained, proactive ethical hackers. We provide expert-level penetration testing services that are thorough and tailored to help foster a safe digital space where everyone has the right to privacy and security. Packetlabs consultants find weaknesses others overlook and continuously learn new ways to evade controls. We hold ourselves to a very high standard.

To do so, weonlyhire individuals with the same drive and passion.

The Ethical Hacker – Infrastructure & Red Team is responsible for planning, executing, and reporting on infrastructure penetration testing, cloud security assessments, Active Directory security assessments, and adversary simulation engagements. The role evaluates the effectiveness of client security controls by identifying, validating, and demonstrating exploitable security vulnerabilities across enterprise infrastructure using industry-recognized offensive security methodologies.

Working independently and collaboratively with other security consultants, the Ethical Hacker performs offensive security assessments across on-premises, hybrid, and cloud environments while contributing to red team operations, purple team exercises, and advanced security testing engagements. The role provides technical guidance to clients through detailed reporting and presentations while contributing to the continuous improvement of Packetlabs’ offensive security methodologies, tooling, and service offerings.

Who we are looking for

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related discipline; equivalent practical experience will be considered.
• Minimum of 3 years of professional experience performing infrastructure penetration testing, red teaming, adversary simulation, or offensive security consulting.
• Demonstrated experience conducting penetration testing across enterprise infrastructure, including Windows, Linux, Active Directory, Microsoft Entra ID, cloud platforms, and enterprise networking.
• Experience performing internal and external network penetration testing, privilege escalation, Active Directory security assessments, and lateral movement testing.
• Experience assessing cloud environments, including AWS, Microsoft Azure, or Google Cloud Platform.
• Strong understanding of enterprise networking, authentication technologies, identity management, cloud security, and offensive security methodologies.
• Experience using industry-standard offensive security frameworks, tools, and tradecraft.
• Excellent technical writing, presentation, and communication skills, with the ability to communicate findings to both technical and executive stakeholders.
• Industry certifications such as OSCP, OSEP, CRTO, CRTE, CARTP, CARTA, CREST CRT, CREST CCT, PNPT, GPEN, GXPN, or equivalent are considered an asset. OSCP or equivalent demonstrated technical capability is strongly preferred.
• Experience participating in Red Team, Purple Team, adversary simulation, or threat emulation engagements is considered an asset.
• Customer-first mentality. You are a great communicator with clients, project managers, and teammates. Rapid responses and on time.
• You deliver work that you take pride in. Your work is an autograph of your excellence.
• You dig deeper into every finding. Doesn’t stop until impact is proven.
• You are comfortable being uncomfortable. Goes towards obstacles, not away from them. Consulting isn’t your typical job and requires adapting to rapidly changing environments.
• You are always learning. Cybersecurity is changing every day, and you need to keep up or want to keep up. Be deeply aware of your skillset and be willing to improve.
• You are self-motivated and dependable.
• You are humble. Egos don’t have a place at Packetlabs.

What you’ll be doing

• Infrastructure Security Assessmen** ts**
• • Plan and execute infrastructure penetration testing engagements across on-premises, hybrid, cloud, wireless, and enterprise network environments.
  • Perform internal and external network penetration testing to identify, validate, and exploit security vulnerabilities using manual testing methodologies and industry-standard offensive security tools.
  • Assess enterprise technologies including Active Directory, Microsoft Entra ID (Azure AD), Windows and Linux environments, virtualization platforms, cloud services, and supporting infrastructure.
  • Evaluate cloud environments including AWS, Microsoft Azure, and Google Cloud Platform to identify configuration weaknesses, privilege escalation opportunities, identity risks, and cloud security vulnerabilities.
  • Assess containerized environments, Kubernetes platforms, CI/CD pipelines, and cloud-native technologies where applicable.
• Red Team & Adversary Simulation
• • Participate in and lead adversary simulation, red team, and objective-based security engagements in accordance with established methodologies and client objectives.
  • Execute offensive security operations across the attack lifecycle, including reconnaissance, initial access, persistence, privilege escalation, credential access, lateral movement, defense evasion, command and control, and objective execution.
  • Support purple team engagements by working collaboratively with defensive teams to validate detections, improve monitoring capabilities, and strengthen defensive controls.
  • Develop and execute attack scenarios that demonstrate realistic business impact while maintaining client system integrity.
• Client Delivery & Reporting
• • Prepare comprehensive technical reports that clearly communicate vulnerabilities, attack paths, business impact, risk ratings, and remediation recommendations.
  • Present assessment findings to technical teams, executive stakeholders, and client leadership.
  • Provide technical guidance on remediation strategies, security architecture, and defensive improvements.
  • Manage assigned engagements while ensuring delivery quality, timelines, and client expectations are achieved.
• Technical Leadership & Continuous Improvement
• • Maintain expertise in offensive security methodologies, infrastructure security, cloud technologies, Active Directory security, and emerging attack techniques.
  • Contribute to the development and continuous improvement of testing methodologies, internal tooling, technical documentation, and service offerings.
  • Participate in technical research, automation initiatives, internal training, and knowledge-sharing activities.
  • Collaborate with consulting teams to strengthen technical quality, consistency, and service delivery across the Offensive Security practice.
  • Perform other duties as assigned.

How is success defined

• Performance in this role is evaluated using a combination of technical, operational, and client-focused measures, including but not limited to:
• • Successful delivery of infrastructure penetration testing and adversary simulation engagements within established quality, budget, and timeline expectations.
  • Accuracy, completeness, and technical quality of client reports and deliverables.
  • Demonstrated expertise across enterprise infrastructure, cloud security, Active Directory, and offensive security methodologies.
  • Positive client feedback regarding technical expertise, communication, and professionalism.
  • Contribution to technical research, methodology development, automation, and knowledge-sharing initiatives.
  • Effective collaboration with Delivery Managers, Project Managers, and consulting team members.
  • Ongoing professional development through certifications, research, and technical skill advancement.

Why us?

• The opportunity to work on high-stakes hardware engagements where your judgment and bench skills genuinely matter
• Receive immediate and ongoing offensive security training, mentorship, and professional development to advance your technical capabilities
• Play a key role in shaping the growth, direction, and methodology of Packetlabs’ expanding hardware practice
• A leadership team that values substance, quality, and disciplined execution
• Collaboration with a highly skilled team of security professionals who are passionate about technical excellence and raising the bar
• Competitive compensation and growth opportunity
• GRRSP with corporate matching in Canada
• Participation in corporate benefit plans within Canada
• Flexible work environment that empowers employees to do their best work
• Fully remote within Canada