Remote Penetration Tester — Web, Cloud & AD Security

Team: Cybersecurity Professional Services Location: Remote - USA Type: Full-time Hours: Monday-Friday 8AM-5PM (Central Time)

We are seeking an intermediate-level or senior-level Penetration Tester to join our offensive security team. This is a hands-on role for someone who can plan and execute authorized security assessments across web applications, internal and external networks, cloud environments, APIs, and Active Directory domains. You will identify meaningful security weaknesses, validate real-world impact through controlled exploitation, and deliver clear, actionable reports to both technical and executive audiences.

The ideal candidate combines strong technical depth with sound judgment, professional communication, and a practical approach to remediation.

Responsibilities Include:

• Conduct penetration testing engagements from scoping and reconnaissance through exploitation, reporting, and client readout
• Assess web applications, APIs, network infrastructure, cloud environments, wireless deployments, and Active Directory domains
• Perform attack surface mapping, vulnerability validation, exploitation, and post-exploitation activities in a controlled, authorized manner
• Identify attack paths, privilege escalation opportunities, credential exposure, and lateral movement risks
• Develop custom tooling, scripts, and automation to improve testing efficiency and coverage
• Contribute to the design, improvement, and maintenance of internal security testing tools and frameworks
• Produce high-quality reports with clear severity ratings, evidence, business context, and remediation guidance
• Present findings to technical teams, security leaders, and executive stakeholders
• Participate in client-facing meetings to walk through security assessment results, discuss remediation priorities, and provide practical guidance on strengthening overall cybersecurity posture
• Contribute to internal research, methodology development, and knowledge sharing within the team
• Support the growth of less experienced testers through collaboration, review, and informal mentorship

Required Technical Tooling Proficiency:

Candidates should demonstrate strong proficiency across the core categories and working familiarity with at least two specialized categories.

Core Categories:
These represent the foundational skill areas expected for this role.

• OSINT & Passive Reconnaissance — Tools such as Shodan, the Harvester, Recon-ng, Spider Foot, and Maltego
• Reconnaissance & Information Gathering — Tools such as Nmap, Masscan, Amass, Subfinder, and Rustscan
• Web Application Security Testing — Tools such as Burp Suite, OWASP ZAP, Nuclei, ffuf, and SQLMap
• Directory & Content Discovery — Tools such as Gobuster, Feroxbuster, Dirsearch, Dirb, and Wfuzz
• Exploitation & C2 Frameworks — Tools such as Metasploit, Msfvenom, Cobalt Strike, Sliver, and Havoc
• Active Directory & Network Protocol Exploitation — Tools such as Blood Hound, Impacket, Net Exec/Crack Map Exec , Responder, and Rubeus
• Post-Exploitation & Privilege Escalation — Tools such as LinPEAS, WinPEAS, Mimikatz, Seatbelt, and Sharp Collection
• Network Traffic Analysis & Packet Capture — Tools such as Wireshark, tcpdump, tshark, Network Miner, and Ettercap
• Password Cracking & Credential Attacks — Tools such as Hashcat, John the Ripper, Hydra, CeWL, and Hash-identifier
• Wireless Security Testing — Tools such as Aircrack-ng (Airmon-ng, Airodump-ng, Aireplay-ng), Kismet, Wifite, and Bettercap

Specialized Categories:
These represent areas of deeper focus that strengthen a candidate's profile. Working familiarity with at least two is expected; additional specialized expertise will increase the potential salary base.

• Social Engineering Testing
  - Tools such as GoPhish, Evilgnix, EvilNo
  
  VNC, and…