Senior Penetration Tester: Cloud, Apps & Network Security

Deer Brook Consulting, Inc.; New Gloucester, Northern (ME, KY); Hybrid; USD 90,000 - 120,000; Full time

Job summary

Deer Brook Consulting, Inc. is seeking an experienced Penetration Tester to assess security across internal, external, and cloud environments, including networks, applications, APIs, and supporting infrastructure.

You will identify vulnerabilities, simulate attacks, and deliver remediation guidance with clear risk ratings and actionable steps for clients. The role requires strong written communication and collaboration with client teams.

Qualifications

• 3–5+ years of hands-on penetration testing across internal networks, external systems, web/mobile apps, and APIs.
• Strong knowledge of network security, application security, and common attack vectors.
• Experience with OSINT-based discovery and asset validation in engagement scoping.

Responsibilities

• Perform manual and automated penetration tests across internal networks, external-facing systems, web and mobile applications, APIs, and supporting infrastructure.
• Conduct OSINT-based discovery and asset validation as part of engagement scoping.
• Identify, exploit, and document vulnerabilities in line with industry standards such as OWASP Top 10, MITRE ATT&CK, and other relevant frameworks.
• Simulate real-world attack scenarios to assess security posture across multiple environments.
• Produce detailed technical reports and executive summaries with clear risk ratings and remediation steps.
• Validate fixes for previously identified vulnerabilities and perform regression testing.
• Stay current on emerging attack techniques, vulnerabilities, and industry trends.
• Collaborate with client teams to provide remediation guidance and security best practices.
• Ensure compliance with applicable regulations and frameworks (e.g., PCI-DSS, HIPAA, GDPR).

Skills

Penetration testing

Network security

Application security

Vulnerability assessment

Active Directory assessments

Tools

Burp Suite

OWASP ZAP

Nmap

Metasploit

MobSF

Job description

Deer Brook Consulting, Inc. is seeking an experienced Penetration Tester to assess security across internal, external, and cloud environments, including networks, applications, APIs, and supporting infrastructure.

You will identify vulnerabilities, simulate attacks, and deliver remediation guidance with clear risk ratings and actionable steps for clients. The role requires strong written communication and collaboration with client teams.