Senior Internal Penetration Tester | Cloud & AD Security

A-LIGN; United States; Remote; USD 120,000 - 180,000; Full time

Benefits offered by this job

Healthcare

Dental

Vision

Life Insurance

Disability Insurance

401(k) Plan

Bonus

Technology Allowance

Certification Reimbursement

Career Coaching

Paid Time Off

Office Closure December 25-January 1

Vacation Bonus

Summer Hours

Job summary

Pathfynder by A-LIGN is seeking an experienced Internal Penetration Tester to lead offensive security engagements across internal networks and cloud-based SaaS environments. You will identify real-world risks, manually exploit vulnerabilities, document findings, and provide practical remediation guidance to clients.

Reporting to the Director of Internal Offensive Operations, this full-time role requires strong hands-on skills, deep knowledge of AD attack paths, and the ability to communicate

Qualifications

• Must possess strong offensive security fundamentals and practical testing experience.
• Experience with internal network, AD, red/purple team engagements preferred.
• Ability to communicate findings clearly to clients and stakeholders.

Responsibilities

• Execute internal network and cloud-based SaaS penetration testing engagements.
• Identify, validate, and exploit vulnerabilities using public or custom exploits.
• Assess risk, provide remediation guidance, and deliver client-ready reports.
• Communicate results and recommendations to client stakeholders.
• Maintain quality and timelines with minimal oversight; mentor teammates.

Education

Degree in cybersecurity, computer information systems, related discipline or equivalent professional

Tools

Nmap

BloodHound

Impacket

Metasploit

Wireshark

Nessus

Job description

Pathfynder by A-LIGN is seeking an experienced Internal Penetration Tester to lead offensive security engagements across internal networks and cloud-based SaaS environments. You will identify real-world risks, manually exploit vulnerabilities, document findings, and provide practical remediation guidance to clients.

Reporting to the Director of Internal Offensive Operations, this full-time role requires strong hands-on skills, deep knowledge of AD attack paths, and the ability to communicate