Remote Senior Penetration Tester – Red Team & AppSec

Reactforce; Arizona; On-site; USD 120,000 - 160,000; Full time

Job summary

Reactforce is seeking a Sr. Penetration Tester / Ethical Hacker for a remote contract role.

You will plan and execute advanced tests across web, mobile, API, network, and cloud environments to identify security gaps and exploitable weaknesses. You will lead red team exercises, craft attack scenarios, document findings, and deliver actionable remediation guidance to technical and non-technical stakeholders, while collaborating with incident response and vCISO teams to continuously improve our

Qualifications

• Strong cybersecurity foundation with threat modeling and MITRE ATT&CK familiarity.
• Expertise in application security testing for web, mobile, and API security.
• Hands-on red teaming including adversary emulation, lateral movement, privilege escalation, stealth.
• Reverse engineering and malware analysis: disassembly, debugging, behavior analysis.
• Experience with penetration testing toolchains (Burp Suite, Metasploit, Nmap, Cobalt Strike, Kali).
• Strong scripting skills (Python/PowerShell/Bash/Go) for tooling and automation.
• Ability to deliver clear reports to technical and business audiences.
• Certifications like OSCP/OSCE/OSEP/GXPN/GREM are highly beneficial.

Responsibilities

• Plan and execute advanced penetration tests across web, mobile, API, network, and cloud environments.
• Perform red team exercises, develop attack scenarios, document findings, and provide remediation guidance.
• Collaborate with incident response and vCISO teams; refine testing methodologies and tooling.
• Stay current with emerging threats and security best practices; continuously improve Reactforce’s services.

Skills

Threat modeling

Application security

Red Team operations

Reverse engineering

Malware analysis

Scripting (Python/PS/Bash/Go)

Education

OSCP

OSCE

OSEP

Tools

Burp Suite

Metasploit

Nmap

Cobalt Strike

Kali Linux

Job description

Reactforce is seeking a Sr. Penetration Tester / Ethical Hacker for a remote contract role.

You will plan and execute advanced tests across web, mobile, API, network, and cloud environments to identify security gaps and exploitable weaknesses. You will lead red team exercises, craft attack scenarios, document findings, and deliver actionable remediation guidance to technical and non-technical stakeholders, while collaborating with incident response and vCISO teams to continuously improve our