Our client, a rapidly growing cybersecurity consultancy operating with a remote-first culture, is seeking a talented and experienced Lead Penetration Tester to join their elite team. This role is fully remote, allowing you to work from the comfort of your own home. You will lead and conduct comprehensive security assessments, including network, application, and infrastructure penetration tests, to identify vulnerabilities and provide actionable remediation recommendations. This position requires deep technical expertise in offensive security techniques, advanced exploitation methods, and a strong understanding of various attack vectors. You will mentor junior testers, develop innovative testing methodologies, and contribute to the company's knowledge base. The ideal candidate is passionate about breaking systems to make them stronger and possesses excellent communication skills to articulate complex findings to clients. Join a dynamic, globally distributed team dedicated to delivering exceptional security assurance services to a diverse client base. Your expertise will be crucial in helping clients proactively defend against sophisticated cyber threats.
Key Responsibilities
- Lead and execute complex penetration tests, including network, web application, mobile application, and cloud environments.
- Develop and refine penetration testing methodologies, tools, and techniques.
- Identify, exploit, and document vulnerabilities in client systems and applications.
- Perform threat modeling and risk analysis to guide testing efforts.
- Mentor and guide junior penetration testers, providing technical expertise and feedback.
- Communicate complex technical findings and remediation strategies clearly to clients (technical and non-technical audiences).
- Develop detailed and professional penetration test reports.
- Stay current with the latest offensive security techniques, tools, and threat intelligence.
- Contribute to the development of proprietary security tools and scripts.
- Collaborate with internal teams to improve service offerings and client engagements.
Requirements
- Bachelor's degree in Cybersecurity, Computer Science, or a related field, or equivalent experience.
- 5+ years of hands-on experience in penetration testing and offensive security.
- Demonstrated expertise in various penetration testing domains (network, web, mobile, cloud).
- Proficiency with a wide range of security tools (e.g., Metasploit, Burp Suite, Nmap, Wireshark).
- Strong understanding of operating systems (Windows, Linux), networking, and web technologies.
- Experience with scripting and programming languages (e.g., Python, Bash, PowerShell).
- Proven ability to lead projects and mentor team members.
- Excellent analytical, problem-solving, and reporting skills.
- Strong communication and interpersonal skills, comfortable working remotely and client-facing.
- Relevant certifications such as OSCP, OSCE, GPEN, CEH Master, or CISSP are highly desirable.
- Demonstrated passion for cybersecurity and ethical hacking.
Benefits
- Highly competitive salary and performance-based bonuses.
- Comprehensive health, dental, and vision insurance.
- Generous paid time off and flexible work schedule.
- Home office setup stipend and recurring monthly internet/utility reimbursement.
- Annual budget for training, conferences, and certifications.
- Opportunity to work on diverse and challenging client engagements globally.
- 401(k) or equivalent retirement plan with company match.
- A collaborative and supportive remote team culture.
- Access to cutting-edge offensive security tools and resources.
- Direct impact on improving the security posture of numerous organizations.