Senior Penetration Testing Specialist

NextGenEnergyJobs; Atlanta (GA); On-site; USD 120,000 - 160,000; Full time

Job summary

NextGenEnergyJobs is seeking a senior penetration tester to lead security assessments across cloud, network, web applications, and APIs. You will author comprehensive assessment reports, propose mitigations, and collaborate with development and security teams to improve posture.

The ideal candidate has 5+ years in penetration testing, with hands-on experience across AWS/Azure/GCP, and familiarity with major security frameworks. OSCP/OSWE/CIT certifications are a plus.

Qualifications

• 5+ years in penetration testing or related cybersecurity role focusing on network, cloud, web app, and API testing.
• Experience documenting assessment results and creating remediation reports.
• Familiarity with FedRAMP, PCI DSS, PCI SSF requirements.
• Red-Team and Purple-Team engagements a plus.
• Proficient in SDLC and DevSecOps integration.
• Strong communication skills for technical and non-technical stakeholders.

Skills

Penetration testing

Cloud security testing

Web application testing

API testing

Documentation

DevSecOps

Scripting (Python Bash PowerShell)

Tools

Burp Suite

Metasploit

Nmap

Nessus

Wireshark

Kali Linux

Job description

Work with a Top 20 CPA and advisory firm that Accounts for Anything.

Requirements

• Have experience with cloud infrastructure offensive security assessments (e.g., AWS, Azure, GCP), web application and API penetration testing, and traditional network penetration testing
• Are proficient in developing assessment documentation and documenting the results of your work
• Are familiar with penetration testing requirements for common security compliance frameworks (e.g., FedRAMP, PCI DSS, PCI SSF)
• Experience with Red-Team and Purple-Team engagements is a huge plus.
• Minimum of 5 years' experience in penetration testing or a related cybersecurity role, with a focus on network, cloud infrastructure, web application, and API testing.
• Expertise in network penetration testing, including assessment of protocols (e.g., TCP/IP, DNS, VPN), firewalls, and intrusion detection/prevention systems.
• Hands-on experience with cloud security testing in platforms such as AWS, Azure, or GCP, and their cloud native solutions.
• In-depth knowledge of web application penetration testing, covering OWASP Top 10 vulnerabilities (e.g., SQL injection, XSS, CSRF) and secure coding practices.
• Strong proficiency in API security testing, including REST, SOAP, and GraphQL, with experience in identifying issues like broken authentication, excessive data exposure, and injection flaws.
• Familiarity with common penetration testing tools such as Burp Suite, Metasploit, Nmap, Nessus, Wireshark, and Kali Linux.
• Experience with scripting languages (e.g., Python, Bash, PowerShell) for automating tests or developing custom exploits.
• Understanding of secure development lifecycle (SDLC) and DevSecOps practices to integrate security into CI/CD pipelines.
• Strong analytical and problem-solving skills, with the ability to think like an attacker and identify complex attack chains.
• Excellent communication skills to articulate technical findings to both technical and non-technical stakeholders in verbal and written form.
• Bonus – OSCP, OSWE, CRTP, and other certifications that require hands on skills application to obtain are a huge plus.