Penetration Tester - Infrastructure & Red Team

Packetlabs offers a role for an ethical hacker who wants hands-on testing, real client impact, and room to grow. This position supports continued learning through paid education and professional development reimbursement
, along with a flexible work environment designed to help you do your best work. You can also look forward to paid volunteer day
, paid Birthday day off
, and paid U.S. public holidays
, with a compensation range of USD 90,000 to 130,000 per year (Remote within Texas or Florida
, onsite in Florida).

The Penetration Tester will plan, execute, and report on infrastructure penetration testing and adversary simulation work across enterprise environments. Engagements may cover on-premises, hybrid, and cloud systems, with testing that evaluates security controls by identifying, validating, and demonstrating exploitable vulnerabilities.

• Plan and run infrastructure penetration testing engagements across on-premises, hybrid, cloud, wireless, and enterprise networks
  .
• Conduct internal and external network penetration testing using manual methodologies and industry-standard offensive security tools.
• Assess enterprise technologies including Active Directory
  , Microsoft Entra  (Azure AD),
  Windows and Linux
  , virtualization platforms, cloud services, and supporting infrastructure.
• Evaluate cloud environments across AWS
  , Microsoft Azure
  , and Google Cloud Platform to identify configuration weaknesses, privilege escalation opportunities, identity risks, and cloud security vulnerabilities.
• Assess containerized environments
  , Kubernetes
  , and CI/CD pipelines where applicable.
• Participate in and lead adversary simulation
  , red team
  , and objective-based engagements in line with established methodologies and client objectives.
• Execute offensive security operations across the attack lifecycle, including reconnaissance, initial access, persistence, privilege escalation, credential access, lateral movement, defense evasion, command and control, and objective execution.
• Support purple team efforts by collaborating with defensive teams to validate detections, improve monitoring capabilities, and strengthen defensive controls.
• Develop attack scenarios that demonstrate realistic business impact while maintaining client system integrity.
• Produce comprehensive technical reports covering vulnerabilities, attack paths, business impact, risk ratings, and remediation recommendations; present findings to technical and executive stakeholders.
• Provide technical guidance on remediation strategies, security architecture, and defensive improvements, while managing engagement delivery quality, timelines, and client expectations.
• Contribute to improving testing methodologies, internal tooling, technical documentation, and service offerings through research, automation initiatives, internal training, and knowledge-sharing.

Success in this role also includes contributing to technical research and collaborating with consulting teams to strengthen consistency and delivery across the Offensive Security practice.

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related discipline;
  equivalent practical experience will be considered.
• 3+ years of professional experience performing infrastructure penetration testing, red teaming, adversary simulation, or offensive security consulting.
• Demonstrated experience with enterprise infrastructure testing across Windows, Linux, Active Directory, Microsoft Entra ,
  cloud platforms
  , and enterprise networking.
• Experience with internal and external network penetration testing, privilege escalation, Active Directory security assessments, and lateral movement testing.
• Experience assessing cloud environments including AWS
  , Microsoft Azure
  , or Google Cloud Platform
  .
• Strong understanding of enterprise networking, authentication and identity management, cloud security, and offensive security methodologies.
• Experience using industry-standard offensive security frameworks, tools, and tradecraft
  .
• Excellent technical writing
  , presentation
  , and communication skills for technical and executive audiences.
• Industry certifications such as OSCP, OSEP, CRTO, CRTE, CARTP, CARTA, CREST CRT, CREST CCT, PNPT, GPEN, GXPN
  , or equivalent are an asset;
  OSCP or equivalent demonstrated technical capability is strongly preferred.
• Experience in red team
  , purple team
  , adversary simulation, or threat emulation is an asset.
• Customer-first mentality with rapid responses and on-time delivery.
• Commitment to validating…