Penetration Tester (Mid+/ Senior)

UnderDefense Inc.; United States; Hybrid; USD 110,000 - 190,000; Full time

Benefits offered by this job

Flexible hours

Paid vacation and sick leave

Internal training and conferences

English courses

Team culture and growth

Work-rest balance facilities

Job summary

UnderDefense Inc. is seeking a Penetration Tester (Mid+/Senior) to join our security team in the United States. This role covers red team engagements, AD, cloud, mobile and IoT testing, with client-facing reporting expectations.

You will develop implants and exploits as needed and produce detailed risk reports. OSCP-like certifications and coding skills (Python/C/C++/.NET) are highly valued. Flexible hours and remote-friendly option offered.

Qualifications

• Red Team engagements end-to-end including planning, execution and reporting.
• Experience with AD/OSINT, and evading defensive mechanisms.
• Knowledge of testing across Mobile/Desktop/IoT, and cloud infrastructure.
• Experience with Python/C/C++ or .NET is a plus.

Responsibilities

• Independently own and deliver Red Team engagements from start to finish.
• Handle complex projects across Mobile, Desktop, and IoT.
• Develop implants, beacons and exploits when required.
• Create detailed client reports outlining risks and recommendations.
• Share expertise through internal sessions and knowledge sharing.

Skills

Red Team

Active Directory testing

OPSEC techniques

Mobile/Desktop/IoT testing

Cloud testing

Business logic vulnerabilities

AI tooling

English report delivery

Web testing (basics)

Education

OSCP / CRTO / OSEP

Tools

Python

C/C++

.NET

Job description

Penetration Tester (Mid+/ Senior)

About company

UnderDefense is a fast-growing company that safeguards businesses around the globe from cybersecurity threats. We are a globally top-ranked firm by Gartner and Clutch, provide cyber resiliency consulting and technology-enabled services to anticipate, manage and defend against cyber threats. We empower clients to predict, prevent, detect, and respond to threats.
We work with 122 clients in more than 20 countries. We have already detected 38K vulnerabilities before hackers tried to exploit them. We are passionate about making the Internet a Safer to people and businesses.

We are looking for bright and self-motivated individuals to join our technical team. Someone who is passionate about Security as we are.

Qualifications:

• Red Team (core):hands-on experience with C2 frameworks; base in exploit development and writing implants/beacons for C2.
• Deep Internal / Active Directorypenetration testing.
• OPSEC techniquesand understanding of how SOC and defensive mechanisms work – and how to evade them.
• Mobile, Desktop, IoT (willing to cover):general testing techniques; understanding of Windows/Linux/MacOS/iOS/Android internals and system-level vulnerabilities; for IoT – protocols plus basic hardware skills (disassemble a board, solder).
• Cloud:understanding of cloud infrastructure, privileges and related attack vectors.
• Business-logic vulnerabilities:proven experience and breadth in finding non-standard logic flaws.
• Deep adoption of AI tooling(own setups, MCP; AI integrated into the workflow – not surface-level use).
• Englishsufficient to independently present a report to the client and answer questions.
• Webis not the core focus but assumed by default at this level.

Preferred Experience:OSCP / CRTO / OSEP or other related offensive-security certifications; ability to code in Python, C/C++, .NET or similar.

Responsibilities:

• Independently own and deliver Red Team engagements end-to-end (planning, execution, reporting, client delivery).
• Take on complex projects across Mobile, Desktop and IoT
• Develop custom implants, beacons and exploits for Windows/Mac when engagements require it.
• Create detailed reports explaining technical and logical findings, business risk and prioritized recommendations.
• Share expertise: run lessons-learned, internal lectures and knowledge sharing
• Act as a role model by example – take the initiative, dig in, take ownership.
• Collaborate closely with the team and contribute to continuous improvement of teampentest capabilities.
• Think outside the box and simulate real adversarial approaches.

What we offer:

• Growth, really fast growth
• Good salary + really challengeable projects
• Brilliant Team
• Flexible working hours
• Paid vacation and sick-leaves
• Internal training and workshop (conferences, workshops, training, etc.)
• English courses
• Work-rest balance support ( foosball, workout station)

About this position

Location

Office/Remote

Employment type

Full time

Department

Services