Senior Infrastructure Penetration Tester – Onsite (San Jose)

Darwinbox Digital Solutions Pvt. Ltd.; San Jose (CA); On-site; USD 120,000 - 170,000; Full time

Job summary

Sonata Software seeks a Senior Infrastructure Penetration Tester to join its Offensive Security team. The candidate will conduct sophisticated security assessments across corporate infrastructure, cloud environments, data centers, and identity platforms.

Independent work, attack-path development, and clear communication to engineers and leadership are required. The role emphasizes collaboration with security operations, incident response, and engineering teams to reduce risk and improve

Qualifications

• 6+ years of professional experience in penetration testing, offensive security, infrastructure security, or closely related cybersecurity disciplines.
• Strong hands-on experience conducting enterprise infrastructure penetration tests.
• Deep understanding of TCP/IP networking and common enterprise protocols.
• Strong Windows and Linux security knowledge.
• Demonstrated experience with Active Directory and enterprise identity systems.
• Experience with cloud security and at least one major cloud platform: AWS, Azure, or GCP.

Responsibilities

• Plan and execute internal and external infrastructure penetration tests across large enterprise environments.
• Assess Windows, Linux, Unix, network, virtualization, container, and hybrid infrastructure.
• Conduct network, host, service, and application-layer security testing.
• Identify vulnerabilities and demonstrate realistic attack paths and business impact.
• Perform authenticated and unauthenticated penetration testing.
• Conduct lateral movement, privilege escalation, credential-access, and persistence assessments.

Skills

Penetration testing

Offensive security

Infrastructure security

Cloud security

TCP/IP networking

Tools

Kubernetes

Docker

AWS

Job description

Sonata Software seeks a Senior Infrastructure Penetration Tester to join its Offensive Security team. The candidate will conduct sophisticated security assessments across corporate infrastructure, cloud environments, data centers, and identity platforms.

Independent work, attack-path development, and clear communication to engineers and leadership are required. The role emphasizes collaboration with security operations, incident response, and engineering teams to reduce risk and improve