Penetration Testing Engineer

Quantix, Inc.; United States; On-site; USD 131,000 - 145,000; Full time

Job summary

Quantix, Inc. is seeking a Senior Offensive Security Engineer to lead offensive security testing across enterprise apps, infrastructure, cloud environments, and networks.

This role will execute advanced penetration tests and help mature offensive security capabilities. The ideal candidate has 5–7+ years of hands-on experience, proficiency with Burp Suite and Kali Linux, and strong Active Directory exploitation skills.

Qualifications

• 5–7+ years hands-on offensive security or penetration testing across web apps, APIs, enterprise networks, cloud, and infra.
• Proven experience designing, leading, or maturing an enterprise offensive security or penetration testing program.
• Experience with internal and third-party pentesting engagements: scoping, authorization, rules of engagement, and reporting.
• Advanced proficiency with offensive security tools including Burp Suite, Kali Linux, and manual exploitation techniques.
• Strong AD exploitation experience including Kerberoasting, delegation abuse, privilege escalation, and lateral movement.
• Experience securing and assessing cloud environments (IAM security, container security, CI/CD risks).
• Experience leveraging AI tools to improve offensive security testing workflows.

Responsibilities

• Lead offensive security testing across enterprise apps, infrastructure, cloud environments, and networks.
• Execute advanced penetration testing engagements and mature offensive security capabilities.
• Mentor and collaborate with engineering and security teams to remediate security risks.
• Communicate risks clearly to technical and executive audiences.

Skills

Offensive security testing

Penetration testing

Burp Suite

Kali Linux

Active Directory exploitation

Cloud security

AI tools in security

Python / Bash / PowerShell

STRIDE / PASTA

Executive communication

Education

Bachelor's degree in CS or related

Tools

Burp Suite

Kali Linux

PowerShell

Job description

Rate: 95-105/hr W2 or C2C (US Citizen and Green Card only)

Start: ASAP

Job Description: We are seeking a highly skilled Senior Offensive Security Engineer to lead offensive security testing across enterprise applications, infrastructure, cloud environments, and networks. This individual will execute advanced penetration testing engagements, mature offensive security capabilities, and partner closely with engineering and security teams to proactively identify and remediate security risks. The ideal candidate brings deep technical expertise, an adversarial mindset, and a passion for mentoring others while continuously advancing offensive security practices.

Must-Have Qualifications

• 5–7+ years of hands-on offensive security or penetration testing experience across web applications, APIs, enterprise networks, cloud environments, and infrastructure.
• Proven experience designing, leading, or maturing an enterprise offensive security or penetration testing program.
• Expertise performing and managing internal and third-party penetration testing engagements, including scoping, authorization, rules of engagement, and reporting.
• Advanced proficiency with offensive security tools including Burp Suite, Kali Linux, and manual exploitation techniques.
• Strong experience with Active Directory exploitation, including Kerberoasting, delegation abuse, privilege escalation, and lateral movement.
• Experience securing and assessing cloud environments, including IAM security, container security, and CI/CD pipeline risks.
• Experience leveraging AI tools to improve offensive security testing workflows.

Deep knowledge of:

• OWASP Top 10
• MITRE ATT&CK Framework
• CVSS and vulnerability scoring
• End-to-end attack chain methodologies
• Strong scripting and automation skills using Python, Bash, or PowerShell.
• Hands-on experience performing threat modeling using STRIDE, PASTA, or similar methodologies.
• Experience securely handling sensitive testing data and engagement findings.
• Excellent written and verbal communication skills with the ability to clearly communicate technical risks to both technical and executive audiences.
• Demonstrated ability to work independently while collaborating effectively across cross-functional teams.

Preferred Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Information Security, Software Engineering, or equivalent practical experience.
• Offensive security certifications such as OSCP, OSWE, OSEP, or similar.
• Cloud security certifications (AWS, Azure, or Google Cloud).
• Experience with Command & Control (C2) frameworks and adversary emulation.
• Familiarity with SIEM, EDR, and detection engineering concepts.
• Experience with SAST, DAST, Software Composition Analysis (SCA), and vulnerability management platforms.
• Experience developing offensive security testing playbooks and standardized methodologies.
• Familiarity with compliance frameworks such as SOC 2, ISO 27001, PCI DSS, or similar.
• Proven experience mentoring and developing junior offensive security professionals.

Ideal Candidate

The ideal candidate combines elite technical penetration testing skills with the ability to influence security strategy across the enterprise. They thrive in highly collaborative environments, possess a strong adversarial mindset, and are passionate about building mature offensive security capabilities while helping engineering teams proactively reduce organizational risk.