Senior Penetration Tester (US)
Core
Execute manual, methodology-driven penetration testing engagements across web applications, APIs, internal networks, and assumed breach simulations for enterprise clients.
Role type
Senior IC penetration tester (offensive security)
Builds
Evidence-backed security assessments and remediation guidance for enterprise clients
Domain
Cybersecurity / Offensive Security / Penetration Testing
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Manual web application and API testing, Business logic testing, Authentication and session management testing, Internal network assessment, Active Directory enumeration, Lateral movement techniques, Privilege escalation, Post-exploitation, Scripting (Python, PowerShell, Bash), CVSS scoring, Report writing
Preferred skills
C2 frameworks (Cobalt Strike, Havoc, Sliver), Bug bounty participation, OSCP or equivalent certification, SIEM/EDR adversarial perspective
Technologies
Burp Suite, MITRE ATT&CK, PTES, OWASP, Python, Bash, PowerShell, Active Directory, Kerberos, NTLM, ADCS
Responsibilities
Execute web application, API, and mobile penetration tests; Conduct internal and external network assessments; Develop internal tooling and automation scripts; Participate in QA review cycles; Mentor junior testers; Collaborate on scoping and remediation guidance
Seniority
Mid-Senior, hands-on IC