Senior Penetration Tester

What you'll do

• Lead manual and automated penetration tests on web applications and underlying infrastructure.
• Develop test plans to validate vulnerabilities and demonstrate exploitability to engineering teams and senior leadership.
• Participate in purple team exercises to validate preventative and detective controls against adversary techniques.
• Expand pentesting capabilities across cloud-native domains, including CI/CD pipelines, Active Directory, AWS, and Kubernetes.
• Recommend remediation strategies that address root causes through code changes and architectural improvements.
• Perform secure code reviews to identify flaws in authentication, authorization, and business logic.
• Mentor team members on offensive techniques and how to think like an attacker.

What we're looking for

• Bachelor's Degree from an accredited institution in Computer Science, Cybersecurity, or a related field.
• 6 years of experience in technical roles such as security, software development, or systems engineering.
• At least 3 years of experience focused on penetration testing or offensive security.
• Experience with web application and API penetration testing including complex logic, authentication, and authorization flows.
• Proficiency in scripting languages like Python or PowerShell and ability to read code in C#, Java, JavaScript, or Go.
• Ability to perform secure code reviews to identify vulnerabilities such as injection and business logic flaws.
• Experience writing reports that communicate vulnerability risk and remediation paths to both technical teams and senior leadership.
• Security certifications such as OSCP, OSWE, OSEP, GPEN, GXPN, or similar.