Lead Penetration Tester

Penetration tester

In the game of life, are you stuck on level "Meh"? Why not unlock a legendary career move with us at Infinite Ranges!

Let me spill the tea
- Infinite Ranges stands on the cutting edge of deploying, implementing, and custom consulting for tailored Cybersecurity, application modernization and Dev Sec Ops  solutions. In under 48 months, we’ve grown to 60+ OEM partners, a staff of over 50, and hundreds of engagements, delivering both people and professional services at-scale.

This specific project is supposed to last about 12-15 weeks and total of 140hrs give or take, fully remote.

Infinite Ranges is seeking an experienced and creative Lead Penetration Tester to join a high-impact engagement. This role is all about offensive security—building, scripting, and executing attack scenarios across a multitude of modern IT environments.

You’ll work hands-on with physical and virtual targets, execute/develop complex attack chains, and lead red team exercises. This is a unique opportunity to apply your offensive toolkit in a high-fidelity environment and leave a lasting impact on cyber readiness.

• Develop and execute penetration testing campaigns targeting various infrastructure devices.
• Simulate realistic, multi-phase attack chains including lateral movement, privilege escalation, and multiple specific threat vectors.
• Create custom exploits, payloads, and evasion techniques against emulated and physical assets.
• Work closely with scenario designers to script repeatable red team exercises with measurable impact.
• Conduct threat emulation using TTPs based on real-world APTs and adversaries.
• Define offensive toolkits and infrastructure within the environment.
• Document post-exercise findings, attack graphs, and defensive recommendations.
• Participate in workshops and live events to demo adversarial behavior and tactics.

• 5+ years of experience in penetration testing, ethical hacking, or red team operations.
• Strong understanding of the MITRE ATT&CK and IC ATT&CK, and OWASP frameworks.
• Comfort using offensive security tools
• Proficiency with scripting and automation in multiple languages.
• Ability to document complex attacks with clear objectives and results for both technical and non-technical audiences.
• Ability to lead and train Red Teams on attack vectors, attacks ,and APTs

• Offensive Tools:
  Metasploit, Cobalt Strike, Kali Linux, Impacket, Responder, nmap, Blood Hound, Maltego, Burp Suite
• Scripting:
  Python, Bash, Power Shell, VBA
• Platforms: GCP, AWS, VMware, Azure, Docker, Windows, Mac, Linux
• Vulnerability Analysis:
  Tenable, Greenbone OpenVAS, Qualys

• Certifications like OSCP, OSEP, GPEN, GXPN, or GRPT
• Experience simulating APT behavior and running attack plans
• Familiarity with threat intelligence integration
• Background in industrial or manufacturing cybersecurity
• Experience mentoring or coaching blue teams
• Familiarity with IC/OT environments (e.g., SCADA, PLCs, HMIs, industrial protocols).