Remote Penetration Tester – Offensive Security Expert

Xerox Corporation; United States; On-site; USD 90,000 - 140,000; Full time

Job summary

Xerox Corporation is seeking a Penetration Tester with about 3 years of hands-on security testing experience to join our Offensive Security team. You will identify and help remediate vulnerabilities across applications, networks, and cloud environments through simulated attacks.

The role emphasizes collaboration with engineering, IT, and security teams to validate fixes, stay current on threats, and contribute to tooling and playbooks.

Qualifications

• Approximately 3 years of experience in penetration testing or offensive security.
• Based in the United States and authorized to work in the U.S. without sponsorship.
• Solid understanding of OWASP Top 10 and network-layer attacks.
• Hands-on with penetration testing tools and frameworks (Burp Suite, Metasploit, Nmap, Kali Linux).
• Scripting experience for tooling and automation (Python, Bash, PowerShell).
• Strong written communication for technical reports.

Responsibilities

• Plan and execute penetration tests against web applications, networks, APIs, and cloud environments to identify exploitable vulnerabilities.
• Perform manual and automated security testing using industry-standard tools (e.g., Burp Suite, Metasploit, Nmap, Nessus).
• Document findings with risk ratings, reproduction steps, and remediation recommendations.
• Collaborate with engineering and IT teams to validate fixes and re-test remediated issues.
• Stay current on emerging threats, attack techniques, and vulnerability disclosures relevant to Xerox's technology stack.
• Support red team exercises, social engineering assessments, or physical security tests as needed.
• Contribute to internal tooling, scripts, or playbooks to improve testing efficiency and coverage.
• Assist with compliance-driven testing (e.g., PCI-DSS, SOC 2) as required.

Skills

Penetration testing

Offensive security

Vulnerability assessment

Scripting (Python/Bash/PowerShell)

Report writing

Tools

Burp Suite

Metasploit

Nmap

Kali Linux

Job description

Xerox Corporation is seeking a Penetration Tester with about 3 years of hands-on security testing experience to join our Offensive Security team. You will identify and help remediate vulnerabilities across applications, networks, and cloud environments through simulated attacks.

The role emphasizes collaboration with engineering, IT, and security teams to validate fixes, stay current on threats, and contribute to tooling and playbooks.