Remote Internal Penetration Tester – Hands-On Security

ZP Group; United States; Remote; USD 175,000 - 210,000; Full time

Benefits offered by this job

Medical, Dental, Vision

401K

PTO

Holidays

Job summary

Piper Companies is seeking an Internal Penetration Tester to join a high-impact cybersecurity team. This is a fully remote, hands-on role focused on identifying and exploiting vulnerabilities across enterprise environments, supporting proactive threat detection and driving security improvement.

The position emphasizes manual testing, tool customization, and collaboration with clients and internal teams to deliver actionable insights and strengthen security posture.

Qualifications

• 5+ years of internal penetration testing or offensive security.
• Strong Windows and Linux testing, AD analysis, and registry review.
• Experience with BloodHound, Mimikatz, Metasploit, and Cobalt Strike; scripting.
• Excellent written and client communication skills.
• Ability to work autonomously and in teams on complex engagements.

Responsibilities

• Conduct internal penetration tests across Windows and Linux environments.
• Perform manual testing to identify vulnerabilities and lateral movement paths.
• Customize and configure testing tools for client environments.
• Deliver clear reports and present findings to stakeholders.
• Analyze AD structures and registry configurations for privilege escalation.
• Apply current attacker TTPs to assess resilience.
• Collaborate with Red and Purple Teams to enhance detection.
• Script automation and exploit development using Python/PowerShell/Bash.
• Work independently and as part of a team on client engagements.
• Provide consulting to help prioritize remediation.

Skills

Penetration testing

Windows security

Linux security

Scripting (Python/Bash/PowerShell)

Tool customization

Education

OSCP

CRTP

PNPT

CEH

Tools

BloodHound

Mimikatz

Metasploit

Cobalt Strike

Custom scripts

Job description

Piper Companies is seeking an Internal Penetration Tester to join a high-impact cybersecurity team. This is a fully remote, hands-on role focused on identifying and exploiting vulnerabilities across enterprise environments, supporting proactive threat detection and driving security improvement.

The position emphasizes manual testing, tool customization, and collaboration with clients and internal teams to deliver actionable insights and strengthen security posture.