SENIOR PENETRATION TESTER (Remote)
This position is posted by Jobgether on behalf of a partner company. We are currently looking for a SENIOR PENETRATION TESTER (Remote) in the United States.
This role provides an exciting opportunity to lead advanced penetration testing and threat-hunting initiatives across cloud, network, web, and mobile environments. You will design and execute security assessments, uncover vulnerabilities, and provide actionable recommendations to enhance organizational security posture. Working in a collaborative, high-impact environment, you will develop testing frameworks, mentor team members, and engage in research to stay ahead of emerging threats. The position balances hands-on technical work with strategic security advisory responsibilities, contributing directly to strengthening cybersecurity defenses. This is a fully remote role with occasional travel, ideal for a proactive and experienced security professional looking to make a measurable impact.
Accountabilities
- Conduct comprehensive penetration tests across network, cloud, web, and mobile platforms, following NIST, OWASP, MITRE, and other industry standards.
- Execute social engineering campaigns, including phishing, pretext calling, and payload testing.
- Develop and review Rules of Engagement, Penetration Test Plans, and detailed client-ready reports and presentations.
- Provide actionable security recommendations to improve organizational posture and compliance with NIST controls.
- Lead team trainings based on testing guides, engagement debriefs, and emerging threat research.
- Oversee QA for penetration testing reports and ensure compliance with internal and client requirements.
- Develop and maintain security tools, customize toolsets, and manage vendor relationships.
- Contribute to thought leadership through blogs, research publications, and community engagement.
Requirements
- Bachelor’s degree in a relevant field (Computer Science, Cybersecurity, or equivalent).
- 5+ years of hands-on experience in penetration testing, threat hunting, or cybersecurity consulting.
- Relevant certifications such as OSCP, OSCE, OSWP, CEH, or CRTO.
- Strong experience with Kali Linux, Cobalt Strike, Social Engineering Toolkit, Burp Suite, Nessus, Metasploit Framework.
- Solid understanding of coding/scripting (Python, Ruby, PowerShell, Bash) and SQL commands.
- Familiarity with MITRE ATT&CK Framework and industry security standards.
- Excellent analytical, communication, and report-writing skills.
- Ability to work independently and collaboratively within a team environment.
- Travel less than 25% as needed for client engagements.
Benefits
- Competitive salary and performance recognition.
- Fully remote work with flexible scheduling.
- Opportunities for professional development and certifications.
- Access to cutting-edge security tools and technologies.
- Collaborative, supportive team culture with knowledge-sharing initiatives.
- Participation in thought leadership and research within the cybersecurity community.
