Penetration Tester (Mid/Senior) — Red Team Expert

UnderDefense Inc.; United States; Hybrid; USD 120,000 - 190,000; Full time

Benefits offered by this job

Growth opportunities

Competitive salary

Brilliant team

Flexible working hours

Paid vacation and sick-leave

Internal training & conferences

English courses

Work-rest balance

Job summary

UnderDefense Inc. is seeking a Mid+/Senior Penetration Tester to lead and execute Red Team engagements across mobile, desktop, and IoT environments. You will craft implants and exploits for Windows/Mac when required, assess cloud infrastructure, and report findings with prioritized business risks.

Ideal candidates hold OSCP/OSEP or equivalent certifications, can code in Python/C/C++/.NET, and present clear client reports. Flexible hours expected in a dynamic security team.

Qualifications

• Hands-on Red Team experience across multiple platforms.
• Strong knowledge of C2 frameworks and exploit development.
• Proven internal AD and cloud testing capabilities.

Responsibilities

• Independently own End-to-End Red Team engagements.
• Develop custom implants/beacons when needed.
• Deliver detailed client reports with risk and recommendations.
• Share knowledge through internal sessions and trainings.
• Collaborate with teammates to improve testing capabilities.

Skills

Red Team ops

AD/Active Directory tests

OPSEC techniques

Mobile/Desktop/IoT testing

Cloud security testing

Business logic flaws

AI tooling integration

Report presentation

Team collaboration

Education

OSCP/CEH/OSEP or equivalent

Tools

Python

C/C++

.NET

Job description

UnderDefense Inc. is seeking a Mid+/Senior Penetration Tester to lead and execute Red Team engagements across mobile, desktop, and IoT environments. You will craft implants and exploits for Windows/Mac when required, assess cloud infrastructure, and report findings with prioritized business risks.

Ideal candidates hold OSCP/OSEP or equivalent certifications, can code in Python/C/C++/.NET, and present clear client reports. Flexible hours expected in a dynamic security team.