Senior Penetration Tester — Remote & Flexible Hours

BreachLock Inc.; EUA; Presencial; USD 110 000 - 170 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Competitive compensation

Equity opportunities

Flexible work hours

Remote work options

Resumo da oferta

BreachLock Inc. is seeking a Mid-Senior Penetration Tester for a full-time, remote role in the United States.

You will perform manual testing across web apps, APIs, and internal networks, including assumed breach simulations, while collaborating with delivery leadership to ensure high-quality engagement outcomes. Ideal candidates bring 3–5 years of pentest experience, strong Burp Suite and OWASP skills, and scripting abilities in Python, PowerShell, or Bash.

Qualificações

• 3–5 years of professional penetration testing experience in a delivery or consulting context.
• Strong web application and API testing fundamentals — Burp Suite proficiency, OWASP Top 10 and beyond, authentication and session management testing
• Proficiency in scripting and automation (Python, PowerShell, Bash)
• US-based and eligible to work without sponsorship

Responsabilidades

• Execute web application, API and mobile penetration tests with a focus on manual testing beyond automated scanning - business logic, authentication abuse, authorization flaws, and injection chains
• Conduct internal network assessments, external network assessments and assumed breach engagements, including Active Directory enumeration, lateral movement, privilege escalation, and post-exploitation
• Leverage frameworks including MITRE ATT&CK, PTES, and OWASP to structure assessments and findings
• Develop and contribute to internal tooling - automation scripts, reporting utilities, and workflow improvements using Python, Bash, or similar
• Participate in QA review cycles, providing structured feedback on findings, CVSS scoring accuracy, and report quality
• Mentor junior testers through technical guidance and finding review
• Collaborate with delivery leadership on scoping, client kickoff calls, and remediation guidance

Conhecimentos

Penetration testing

Burp Suite

OWASP Top 10

Authentication testing

Python

PowerShell

Bash

Written communication

Formação académica

OSCP or equivalent

BSCP

CRTO

GWAPT

GPEN

Ferramentas

Cobalt Strike

Havoc

Sliver

SIEM platforms

EDR tools

Descrição da oferta de emprego

BreachLock Inc. is seeking a Mid-Senior Penetration Tester for a full-time, remote role in the United States.

You will perform manual testing across web apps, APIs, and internal networks, including assumed breach simulations, while collaborating with delivery leadership to ensure high-quality engagement outcomes. Ideal candidates bring 3–5 years of pentest experience, strong Burp Suite and OWASP skills, and scripting abilities in Python, PowerShell, or Bash.