Senior Penetration Tester / Red Team Engineer

What you'll do

• Conduct comprehensive penetration testing across web applications, APIs, networks, cloud environments, and mobile platforms.
• Perform vulnerability assessments using automated scanning platforms and advanced manual testing techniques.
• Simulate realistic adversary scenarios to evaluate authentication, authorization, and network defenses.
• Identify and validate vulnerabilities, misconfigurations, exposed credentials, and insecure code across enterprise environments.
• Develop Python and Bash scripts to automate penetration testing tasks and improve coverage.
• Document technical evidence and risk impact while providing clear remediation recommendations to stakeholders.
• Partner with technical teams to remediate identified vulnerabilities and validate fixes through retesting.
• Research emerging threats, CVEs, and evolving offensive security methodologies to improve enterprise resilience.

What we're looking for

• 8+ years of hands-on experience in Penetration Testing, Red Teaming, Offensive Security, or Security Engineering.
• Expert-level experience conducting penetration tests across web applications, networks, APIs, endpoints, cloud platforms, and enterprise infrastructure.
• Strong expertise in vulnerability exploitation, attack-path analysis, credential security, authentication testing, and security control validation.
• Advanced hands-on experience with tools including Burp Suite, Metasploit, Nmap, Kali Linux, Pentera, and vulnerability scanners.
• Strong scripting and automation skills using Python, Bash, PowerShell, or similar technologies.
• Deep understanding of OWASP, CVE/CVSS, MITRE ATT&CK, network security, application security, and modern attack methodologies.
• Ability to communicate vulnerabilities, business impact, and remediation priorities to both technical and leadership audiences.
• Relevant certifications such as OSCP, OSEP, OSWE, GPEN, GXPN, CRTO, or equivalent offensive security certifications (preferred).