Lead Penetration Tester

About the Role

Our client is seeking an expert Lead Penetration Tester to join their highly skilled security team and work entirely remotely. In this critical role, you will be responsible for planning, executing, and reporting on comprehensive penetration tests across the organization's infrastructure, applications, and networks. You will identify exploitable vulnerabilities, simulate real-world attacks, and provide actionable recommendations to strengthen security defenses. This position offers a challenging and rewarding opportunity for a top-tier offensive security professional to significantly impact our client's security posture from anywhere.

Key Responsibilities

• Plan, scope, and conduct in-depth penetration tests of web applications, APIs, networks, and cloud environments.
• Utilize a variety of cutting-edge tools and techniques to discover and exploit vulnerabilities.
• Develop detailed and accurate penetration testing reports, including clear explanations of findings and remediation recommendations.
• Mentor junior penetration testers and provide technical guidance and leadership.
• Stay current with the latest exploitation techniques, threat actor methodologies, and security vulnerabilities.
• Collaborate with development and operations teams to ensure vulnerabilities are addressed effectively and in a timely manner.

Requirements

• Bachelor's degree in Cybersecurity, Computer Science, or a related field, or equivalent industry experience.
• 5+ years of professional experience in offensive security, with a focus on penetration testing.
• Deep understanding of common vulnerabilities (e.g., OWASP Top 10) and exploitation techniques.
• Proficiency with penetration testing tools such as Metasploit, Burp Suite, Nmap, and Kali Linux.
• Experience with scripting languages (e.g., Python, Bash) for tool development and automation.
• Relevant certifications such as OSCP, OSCE, or GPEN are highly desirable.

Benefits

• Highly competitive salary, commensurate with advanced penetration testing expertise.
• Fully remote working arrangement, offering ultimate flexibility and autonomy.
• Generous allowance for professional development, training, and conference attendance.
• Opportunity to work on diverse and challenging security projects.
• State-of-the-art security tooling and resources provided.