Senior Penetration Tester - Remote, Manual & Red Teaming

BreachLock Inc.; United States; Remote; USD 120,000 - 190,000; Full time

Benefits offered by this job

Competitive compensation & equity

Flexible work hours

Work with international cybersecurity

Career progression

Exposure to cutting-edge tools

Job summary

BreachLock Inc. is seeking a Mid-Senior Penetration Tester for a full-time remote role in the United States. You will execute manual, methodology-driven engagements across web apps, APIs, and internal networks, including assumed breach simulations, for enterprise clients.

You will mentor junior testers, contribute to internal tooling, and collaborate with leadership on scoping and remediation guidance. Strong communication and proficiency with Burp Suite are required.

Qualifications

• 3–5 years of professional penetration testing experience in a delivery or consulting context.
• Strong web app and API testing fundamentals with Burp Suite proficiency and OWASP Top 10 knowledge.
• Internal network assessment skills including AD enumeration, Kerberoasting, NTLM relay, ADCS misconfigurations, and assumed breach methodology.
• Scripting and automation proficiency (Python, PowerShell, Bash).
• Strong written communication; ability to write clear, well-scoped findings independently.
• Familiarity with PTaaS delivery models or platform-based reporting workflows is a plus.
• US-based and eligible to work without sponsorship.

Responsibilities

• Execute web application, API, and mobile penetration tests focusing on manual testing beyond automated scanning.
• Conduct internal and external network assessments and assumed breach engagements, including AD enumeration and lateral movement.
• Use MITRE ATT&CK, PTES, and OWASP to structure assessments and findings.
• Develop and contribute to internal tooling and reporting utilities using Python, Bash, or similar.
• Participate in QA review cycles, provide feedback on findings, CVSS scoring, and report quality.
• Mentor junior testers through technical guidance and findings reviews.
• Collaborate with delivery leadership on scoping, client kickoff calls, and remediation guidance.

Skills

Penetration testing

Web application testing

API testing

Scripting & automation

Technical writing

Education

OSCP/BSCP/CRTO/GWAPT/GPEN or equivalent

Tools

Burp Suite

Python

PowerShell

Bash

Job description

BreachLock Inc. is seeking a Mid-Senior Penetration Tester for a full-time remote role in the United States. You will execute manual, methodology-driven engagements across web apps, APIs, and internal networks, including assumed breach simulations, for enterprise clients.

You will mentor junior testers, contribute to internal tooling, and collaborate with leadership on scoping and remediation guidance. Strong communication and proficiency with Burp Suite are required.