Network Penetration Tester

About the role

The organization is seeking a Senior Associate in Network Penetration Testing to join their Offensive Cyber Operations team. This role involves conducting advanced security assessments, including both automated and manual testing, across various technologies and systems. The senior assessor will participate in the planning, execution, and reporting of security tests designed to simulate real-world adversaries. The position requires collaboration with a diverse team of security testing professionals and may involve domestic and international travel to support assessment activities.

Responsibilities

• Conduct automated and manual security tests of information systems, analyzing vulnerability scan results, compliance findings, and penetration test data.
• Apply advanced testing techniques such as threat modeling, threat simulation, and social engineering to evaluate system risks.
• Research and stay informed about a wide range of existing and emerging technologies relevant to assessment activities.
• Develop detailed test plans, create operational schedules, execute security assessments, and prepare comprehensive reports post-assessment.
• Document all activities in compliance with the organization's information security policies and operational procedures.
• Participate in continuous testing cycles based on system criticality, threat modeling outcomes, and emerging vulnerabilities.
• Collaborate with team members to support large-scale, complex security projects involving multiple assessors.
• Travel up to 10% to support global security testing initiatives.
• Maintain a professional presence and effectively represent the team when engaging with system owners and stakeholders.

Qualifications

• Minimum of five (5) years of professional experience in technical disciplines such as Penetration Testing, Networking, Firewalls, Server Administration, Encryption, Cloud, Containers, Databases, or Software Development.
• Hands-on, expert-level proficiency in at least one critical technical skill area, supported by relevant certifications.
• Currently hold or be working toward multiple professional or associate-level certifications (e.g., CISSP, GCIH, MCSE, CCNP, RHCE, GPEN, GWAPT, OSCP, MPCE, CEH).
• Advanced understanding of adversarial tactics, techniques, and procedures (TTPs).
• Proficiency with multiple security tools, both open-source and commercial (e.g., Nessus, Burp Suite, AppDetective, Metasploit, NMAP).
• Solid knowledge of the strengths, weaknesses, configuration requirements, and troubleshooting needs of common security tools.
• Strong working proficiency with UNIX-based and Microsoft operating systems, with deep systems engineering experience in at least one.
• Understanding of security guidelines such as NIST 800-53 and NIST 800-115.
• Ability to analyze and synthesize large volumes of complex system data.
• Excellent communication skills to clearly articulate technical findings to both technical and non-technical audiences.
• Strong critical-thinking skills with a creative approach to designing and executing testing methodologies.