Penetration Tester

About the role

In this client-facing role, you’ll plan, execute, document, and present penetration testing and security assessment engagements. You’ll independently conduct internal and external network penetration tests, vulnerability assessments, Active Directory assessments, OSINT/reconnaissance, and authorized exploitation activities. Opportunities to support web application, cloud, wireless, physical security, and social-engineering engagements may be available based on your experience.

Requirements

• 3+ years of IT, cybersecurity, or offensive security experience, including hands-on penetration testing or security assessments
• Strong knowledge of networking, Windows/Linux systems, Active Directory, TCP/IP, DNS, firewalls, and identity services
• Experience with Kali Linux, nmap, Nessus, Metasploit, vulnerability validation, privilege escalation, credential access, and lateral movement
• Ability to write clear, actionable reports and communicate security risk to technical and non-technical stakeholders
• An industry-recognized cybersecurity certification or equivalent demonstrated experience
• Practical penetration testing competency; candidates must hold or obtain a professional-level certification such as PNPT, OSCP/OSCP+, CREST CRT, or equivalent within their first 12 months

Benefits

• Competitive pay and profit-sharing bonuses
• Generous PTO plus eight additional paid holidays
• Company-matched 401(k)
• Strong health plan options—including free plans
• Education and certification reimbursement
• Regular team-building events

Schedule

This role offers in-office, hybrid, and remote options. Occasional travel to company meetings, client sites, and assessments is required, along with some after-hours project work.