Principal Penetration Tester - Security Risk & Exploitation

IBM Computing; Austin (TX); On-site; USD 120,000 - 180,000; Full time

Job summary

IBM Infrastructure & Technology is seeking a Penetration Tester to assess IT security risks across networks, web apps, and systems. You will visualize topology, plan tests, run hacker simulations, and present remediation recommendations.

Candidates must have hands-on testing experience with industry tools (Nmap, Nessus, Metasploit, BurpSuite, TcpDump) and an OSCP or higher certification. Strong TCP/IP, networking, and coding skills are highly valued.

Qualifications

• Penetration testing experience across OS, web apps, and network infrastructure.
• Experience using common penetration testing tools (NMap, Nessus, Metasploit, BurpSuite, Nikto, Tcpdump).
• Candidate must have OSCP or higher offensive security certification.
• Ability to work with AI tools and LLMs, with administrator-level knowledge of Unix/Windows servers.

Responsibilities

• Plan and conduct penetration tests, including hacker simulations and PoC exploitation.
• Clearly describe findings, concerns and provide remediation recommendations.
• Document results and present actionable security improvements.

Skills

Penetration testing

Networking/TCP-IP

Programming (C/C++/Java/C#)

AI tools & LLMs

Documentation & reporting

Education

OSCP or higher Offensive Security Qualification

Tools

NMap

Nessus

Metasploit

BurpSuite

Nikto

Tcpdump

Job description

IBM Infrastructure & Technology is seeking a Penetration Tester to assess IT security risks across networks, web apps, and systems. You will visualize topology, plan tests, run hacker simulations, and present remediation recommendations.

Candidates must have hands-on testing experience with industry tools (Nmap, Nessus, Metasploit, BurpSuite, TcpDump) and an OSCP or higher certification. Strong TCP/IP, networking, and coding skills are highly valued.