Senior Penetration Tester

Igaminghunt; United States; Remote; USD 120,000 - 180,000; Full time

Benefits offered by this job

Fully remote work format

Competitive salary based on experience

Paid annual leave and sick leave

Opportunities for professional growth

Supportive environment focused on long

term growth

Job summary

Igaminghunt is seeking a Senior Penetration Tester to strengthen security across high-load products, infrastructure, cloud environments, and payment flows. You will lead offensive assessments, collaborate with engineering, fraud, and compliance, and mentor junior security specialists.

The role emphasizes hands-on testing across web apps, APIs, mobile apps, and cloud-native ecosystems, with a focus on secure-by-design outcomes and practical remediation.

Qualifications

• 4+ years of hands-on experience in penetration testing or offensive security.
• OSCP or an equivalent offensive security certification
• Strong knowledge of SAST, SCA, DAST, AWS/GCP, MITRE ATT&CK, OWASP ASVS, OWASP WSTG, and PTES
• Good understanding of application architecture, including MVC and data flow principles
• Knowledge of supply chain attack techniques
• Experience writing scripts in Python and Bash
• Understanding of IAM models within at least one major cloud provider
• Hands-on experience testing Kubernetes-based environments, cloud-native applications, CI/CD pipelines (GitLab, GitHub Actions, Jenkins) and IaC solutions (Terraform, Helm, CloudFormation)
• Strong reporting, documentation, and communication skills
• Ability to balance security priorities with business and release deadlines
• Solid understanding of security frameworks and compliance standards, including PCI DSS, ISO 27001, NIST, and GDPR
• At least Upper-Intermediate level of English

Responsibilities

• Plan and execute penetration testing activities across web applications, APIs, mobile applications, internal and external infrastructure, and AWS cloud environments
• Perform offensive security exercises, including red team and assumed-breach scenarios covering privilege escalation, lateral movement, persistence, and data exfiltration
• Assess the security of cloud-native services, Kubernetes environments, microservices, and CI/CD pipelines
• Identify vulnerabilities affecting payment systems, wallets, KYC/AML processes, bonus mechanisms, affiliate tracking, and other business-critical workflows
• Work with Product, Engineering, AppSec, Payments, and Fraud teams to prioritize findings and support remediation efforts
• Develop custom scripts and internal tools to improve testing capabilities where standard solutions are insufficient
• Contribute to threat modeling activities and support secure-by-design initiatives
• Review penetration testing plans, reports, and provide technical guidance to junior and middle security specialists
• Research emerging vulnerabilities, MITRE ATT&CK techniques, security advisories, and translate them into actionable improvements
• Support security assessments for new products, releases, and market launches, including effort estimation and pre-certification activities
• Act as a security advisor for technical and business stakeholders on offensive security matters

Skills

Penetration testing

OSCP

Python

Bash

SAST

SCA

DAST

AWS

GCP

Kubernetes

Terraform

Helm

CloudFormation

GitLab

GitHub Actions

Jenkins

MITRE ATT&CK

OWASP ASVS

OWASP WSTG

PTES

PCI DSS

ISO 27001

NIST

GDPR

English (Upper-Intermediate)

Tools

Kubernetes

AWS

GCP

GitLab

GitHub Actions

Jenkins

Terraform

Helm

CloudFormation

Job description

We are looking for a Senior Penetration Tester to strengthen the security of high-load products by identifying vulnerabilities across applications, infrastructure, cloud environments, and payment flows. In this role, you will work closely with engineering, product, fraud, and compliance teams to improve security posture through offensive security assessments and practical remediation.

Responsibilities:

• Plan and execute penetration testing activities across web applications, APIs, mobile applications, internal and external infrastructure, and AWS cloud environments

• Perform offensive security exercises, including red team and assumed-breach scenarios covering privilege escalation, lateral movement, persistence, and data exfiltration

• Assess the security of cloud-native services, Kubernetes environments, microservices, and CI/CD pipelines

• Identify vulnerabilities affecting payment systems, wallets, KYC/AML processes, bonus mechanisms, affiliate tracking, and other business-critical workflows

• Work with Product, Engineering, AppSec, Payments, and Fraud teams to prioritize findings and support remediation efforts

• Develop custom scripts and internal tools to improve testing capabilities where standard solutions are insufficient

• Contribute to threat modeling activities and support secure-by-design initiatives

• Review penetration testing plans, reports, and provide technical guidance to junior and middle security specialists

• Research emerging vulnerabilities, MITRE ATT&CK techniques, security advisories, and translate them into actionable improvements

• Support security assessments for new products, releases, and market launches, including effort estimation and pre-certification activities

• Act as a security advisor for technical and business stakeholders on offensive security matters

Requirements:

• 4+ years of hands-on experience in penetration testing or offensive security

• Proven practical experience in at least three of the following areas:

• OSCP or an equivalent offensive security certification

• Strong knowledge of SAST , SCA , DAST , AWS/GCP , MITRE ATT&CK , OWASP ASVS , OWASP WSTG , and PTES

• Good understanding of application architecture, including MVC and data flow principles

• Knowledge of supply chain attack techniques

• Experience writing scripts in Python and Bash

• Understanding of IAM models within at least one major cloud provider

• Hands-on experience testing Kubernetes-based environments, cloud-native applications, CI/CD pipelines ( GitLab , GitHub Actions , Jenkins ) and Infrastructure as Code solutions ( Terraform , Helm , CloudFormation )

• Strong reporting, documentation, and communication skills

• Ability to balance security priorities with business and release deadlines

• Solid understanding of security frameworks and compliance standards, including PCI DSS , ISO 27001 , NIST , and GDPR

• At least Upper-Intermediate level of English

Would be a plus:

• Advanced offensive security certifications such as OSWE , OSEP , OSED , CRTO , BSCP , ARTE , or GRTE

• Experience designing secure architectures for Kubernetes and AWS environments

• Previous background in iGaming, fintech, or payment products

• Public security research, CVEs, advisories, technical publications, or conference presentations

• Completion of HTB Pro Labs or strong CTF achievements

• Contributions to open-source offensive or defensive security projects

What's in it for you:

• Fully remote working format

• Competitive salary based on experience

• Paid annual leave and sick leave

• Opportunities for professional and career growth

• Supportive environment focused on continuous development and long-term growth