Senior Penetration Tester - Red Team & Cloud Security

SmartRecruiters, Inc.; Washington, Northern (District of Columbia, KY); Hybrid; USD 120,000 - 180,000; Full time

Job summary

SOSi is seeking a Penetration Tester III to support proactive cyber defense activities. You will conduct penetration testing across enterprise systems, perform red team operations, and report vulnerabilities with remediation guidance.

This role requires leadership experience, strong knowledge of MITRE ATT&CK and related frameworks, and a Bachelor’s degree. Work may include IoT, mobile, and cloud environments, with coordination across security engineering, vulnerability management, and incident

Qualifications

• Five to seven years of penetration testing experience.
• Management or team lead experience.
• Experience performing continuous penetration testing.
• Experience conducting red team operations.
• Experience performing IoT, mobile, and cloud penetration testing.
• Experience supporting High Value Asset (HVA) assessments.
• Experience applying MITRE ATT&CK, OSSTMM, OWASP, NIST, PTES, and ISSAF methodologies.
• Bachelor’s Degree as minimum education.
• GPEN or GXPN certification is required.
• CISA AES HVA Lead or Technical Lead, or ability to obtain.
• Plus one of the following certifications: GRTP, CRTL, OSCP, CRTP, CMWAPT, CEPT, CPT, LPT

Responsibilities

• Conduct penetration testing across enterprise systems, applications, and networks.
• Perform red team activities to evaluate security controls and identify weaknesses.
• Support ongoing penetration testing to keep pace with evolving threats.
• Test IoT, mobile, and cloud environments.
• Support High Value Asset (HVA) security assessments.
• Apply testing frameworks (MITRE ATT&CK, OSSTMM, OWASP, NIST, PTES, ISSAF).
• Identify, document, validate, and report vulnerabilities with remediation recommendations.
• Coordinate with security engineering, vulnerability management, and incident response teams.

Skills

GPEN

GXPN

AES HVA Lead/Technical Lead

GRTP

CRTL

OSCP

CRTP

CMWAPT

CEPT

CPT

LPT

Education

Bachelor’s Degree

Job description

SOSi is seeking a Penetration Tester III to support proactive cyber defense activities. You will conduct penetration testing across enterprise systems, perform red team operations, and report vulnerabilities with remediation guidance.

This role requires leadership experience, strong knowledge of MITRE ATT&CK and related frameworks, and a Bachelor’s degree. Work may include IoT, mobile, and cloud environments, with coordination across security engineering, vulnerability management, and incident