Cloud Security Penetration Tester
Core
Plans, leads, and conducts penetration tests across multi-cloud environments and cloud-hosted applications to identify and validate vulnerabilities, misconfigurations, IAM weaknesses, and cloud attack paths.
Role type
Senior IC cloud security penetration tester
Builds
Security assessment reports and remediation strategies for cloud infrastructure and applications
Domain
Cloud security / Offensive security
Required skills
Cloud penetration testing, manual and automated vulnerability assessment, IAM security analysis, privilege escalation path identification, cloud attack path mapping, security tooling evaluation, custom tool development, technical reporting, stakeholder communication
Preferred skills
GIAC Cloud Penetration Tester (GCPN), OffSec Certified Professional (OSCP), GIAC Penetration Tester (GPEN), OffSec Web Assessor (OSWA), OffSec Web Expert (OSWE), GIAC Web Application Penetration Tester (GWAPT)
Technologies
Burp Suite, Pacu, Redboto, CloudBrute, ScoutSuite, Prowler
Responsibilities
Plan and lead penetration tests across multi-cloud environments, perform manual and automated testing to identify vulnerabilities, develop detailed assessment reports, lead the evolution of testing methodologies and tooling, research emerging cloud vulnerabilities and offensive security techniques, evaluate and onboard new tooling
Seniority
Senior, hands-on IC
