Principal Penetration Tester

What you'll do

• Lead and perform penetration testing across applications, cloud, networks, hardware, and operational technology systems.
• Identify security vulnerabilities and perform end-to-end adversary emulation within approved rules of engagement.
• Provide strategic guidance on priorities, tactics, and methodologies for the penetration testing function.
• Manage engagement rules, scoping, and executive risk communications while ensuring remediation follows defined SLAs.
• Create high-quality executive presentations to explain technical risks and remediation plans to non-technical audiences.
• Research emerging threats and vulnerabilities to stay updated on the latest attack techniques and security trends.
• Apply AI and automation to scale reconnaissance, discovery, and security testing processes.
• Partner with detection and incident response teams to turn security findings into actionable detections.

What we're looking for

• Master's Degree in Statistics, Mathematics, Computer Science, or related field and 4+ years of experience in security or related field.
• Bachelor's Degree in Statistics, Mathematics, Computer Science, or related field and 6+ years of experience in security or related field.
• Equivalent experience to the degree and years of experience requirements.
• Ability to pass the Microsoft Cloud background check every two years.
• Must provide verification of citizenship with a valid passport to meet legal restrictions for government agency support.
• 6+ years of experience in identifying security vulnerabilities, software development lifecycle, large-scale computing, modeling, cyber security, and anomaly detection (preferred).
• 6+ years of experience with coding or scripting in languages such as C#, Python, C++, Go, PowerShell, .NET, Rust, or other comparable programming languages (preferred).
• Relevant offensive security certifications such as OffSec OSCP, OSEP/OSCE³, GPEN, GXPN, or OT/ICS certifications (preferred).