RemoteLeaf Logo
Log in Sign up

Senior Penetration Tester (US)

4 months, 3 weeks ago
United States
Full-time
Senior
Penetration Tester
Cybersecurity
Active Directory Bash Burp Suite Cybersecurity OWASP Penetration Testing PowerShell Python SIEM
Apply Now
BreachLock

BreachLock

BreachLock provides a proactive cybersecurity solution that helps organizations identify and remediate potential vulnerabilities to prevent future cyber breaches.

Professional Services
51-250
Founded 2019
View All Jobs 5

Description

  • Execute manual penetration tests for web applications, APIs, and mobile applications, focusing on business logic flaws, authentication abuse, authorization issues, and injection chains.
  • Conduct internal and external network assessments, including assumed breach simulations.
  • Perform Active Directory enumeration, lateral movement, privilege escalation, and post-exploitation activities during internal testing.
  • Use frameworks such as MITRE ATT&CK, PTES, and OWASP to structure assessments and findings.
  • Develop and improve internal tooling, including automation scripts, reporting utilities, and workflow enhancements using Python, Bash, or similar tools.
  • Participate in QA review cycles and provide feedback on findings, CVSS scoring, and report quality.
  • Mentor junior testers by providing technical guidance and reviewing findings.
  • Collaborate with delivery leadership on scoping, client kickoff calls, and remediation guidance.

Requirements

  • 3–5 years of professional penetration testing experience in a delivery or consulting environment.
  • Strong web application and API testing fundamentals, including Burp Suite proficiency.
  • Experience testing authentication and session management, with knowledge of OWASP Top 10 and beyond.
  • Solid internal network assessment skills, including AD enumeration, Kerberoasting, NTLM relay, ADCS misconfigurations, and assumed breach methodology.
  • Proficiency in scripting and automation with Python, PowerShell, Bash, or similar languages.
  • Strong written communication skills and the ability to write clear, accurate, well-scoped findings independently.
  • Familiarity with PTaaS delivery models or platform-based reporting workflows is a plus.
  • Must be US-based and eligible to work without sponsorship.
  • Preferred experience with C2 frameworks such as Cobalt Strike, Havoc, or Sliver.
  • Active involvement in cybersecurity communities, research, or bug bounty programs is preferred.
  • Certifications such as OSCP, BSCP, CRTO, GWAPT, GPEN, or equivalent practical credentials are preferred.
  • Experience with SIEM platforms or EDR tools from an adversarial perspective is preferred.

Benefits

  • Competitive compensation with performance-based equity opportunities.
  • Flexible work hours with hybrid remote options.
  • Opportunity to work with international cybersecurity experts.
  • Strong career progression in a rapidly expanding early-stage company.
  • Exposure to cutting-edge research, tools, and techniques in offensive security.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Innovaccer

4745-Security Engineer II (GRC)

Innovaccer 1K-5K IT Services

Innovaccer is hiring a Security Engineer II (GRC) to support governance, risk, and compliance programs across healthcare, public-sector, customer, and cloud environments.

United States Full-time Mid Level Penetration Tester
AWS Azure Cybersecurity HIPAA
4 hours, 24 minutes ago
Dijital Team

Senior Governance, Risk & Compliance (GRC) Consultant

Dijital Team 11-50 Internet Software & Services

This cybersecurity risk and assurance role delivers governance, compliance, maturity, AI governance, and data protection assessments for commercial and regulated customers, translating findings into actionable risk and remediation advice.

Sri Lanka Full-time Senior Penetration Tester
1 day, 3 hours ago
TEHORA

Conseiller en sécurité informatique

TEHORA 1-10 Construction & Engineering

TEHORA recherche un conseiller ou une conseillère senior en sécurité informatique pour protéger les actifs informationnels, renforcer la posture de cybersécurité et soutenir la conformité aux normes de l’industrie pour ses clients.

Canada Full-time Senior Penetration Tester
Active Directory Cisco Cybersecurity Encryption Linux Metasploit Network Security Nmap Penetration Testing Wireshark
1 day, 4 hours ago
C-Serv

Senior Consultant - F5 Distributed Cloud (XC)

C-Serv 11-50 Internet Software & Services

C-Serv is hiring a Costa Rica-based, full-time remote F5 Distributed Cloud Engineer to design and deliver secure multi-cloud networking and application protection solutions for global enterprise clients.

Costa Rica Full-time Senior Penetration Tester
Ansible AWS Azure DNS GCP Kubernetes Network Security Terraform
6 days, 4 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers