Penetration Tester​/Ethical Hacker

Support global information security effectiveness through penetration testing and red team engagements across modern environments.

• Plan and execute penetration tests across web applications
  , APIs
  , mobile apps
  , networks
  , cloud infrastructure (AWS, Azure, GCP), and internal systems
  .
• Perform manual exploitation and vulnerability validation to reduce false positives and uncover logic flaws automated tooling may miss.
• Design, configure, and run automated vulnerability scanning pipelines to increase coverage and consistency across engagements.
• Build and deploy AI-agent-driven testing workflows to accelerate reconnaissance, fuzzing, exploit chaining, and report generation.
• Run red team engagements simulating APT tactics, techniques, and procedures (TTPs), with tracking and documented activity.

• 3+ years of direct experience performing penetration testing, red teaming, or ethical hacking in an active corporate environment
  .
• Ability to plan and execute penetration tests and red team engagements, including comfort operating in terminal environments
  .
• Working knowledge of common networking protocols:
  HTTP
  , DNS
  , SMB
  , and related fundamentals.
• Familiarity with Windows and Linux systems.
• Proficiency with cross-platform scripting languages such as Python or Golang
  , and Power Shell
  .
• Hands-on experience with industry-standard tools including Burp Suite
  , Metasploit
  , Nmap
  , Wireshark
  , Cobalt Strike
  , Blood Hound
  , and the Kali Linux toolset.

• Cloud: AWS, Azure, GCP
• Scripting: Python, Golang, Power Shell
• Security testing tools: Burp Suite, Metasploit, Nmap, Wireshark, Cobalt Strike, Blood Hound, Kali Linux
• Protocols: HTTP, DNS, SMB

• Location: New York, NY (remote)
• Timezone: Remote (EST hours)
• Salary: USD 70 per hour
• Employment type: W-2 only

• Drive real security value by improving the effectiveness of information security capabilities across business units.
• Work on advanced testing approaches combining manual exploitation with automated scanning and AI-agent-driven workflows
  .
• Perform threat-informed testing by analyzing cyber threat intelligence for actionable takeaways.
• Create executive-ready and client-ready documentation via executive summaries and in-depth technical reporting.
• Collaborate with teams by translating testing objectives and findings into plain English and actionable remediation guidance.