Senior Penetration Tester – Offensive Security

We are looking for an experienced Senior Penetration Tester with 5+ years of hands-on experience in offensive security and penetration testing. The individual will work as a hands-on Individual Contributor, independently planning and executing complex assessments across web applications, APIs, networks, cloud environments, Active Directory, and enterprise infrastructure.

The role requires strong business understanding: the candidate must understand the customer's business model, critical processes, architecture, data flows, crown-jewel assets, and threat landscape and use that context to design risk-driven penetration tests. The individual will also support the SOC through threat hunting, advanced investigations, incident advisory, attack-path analysis, and technical security guidance.

·       Independently plan, scope, execute, document, and close penetration testing engagements from scoping through retesting.

·       Perform advanced Web Application, API, Network, Mobile, Cloud, Active Directory, and Infrastructure penetration testing.

·       Conduct authenticated and unauthenticated assessments and validate vulnerabilities through controlled exploitation.

·       Identify attack chains by combining vulnerabilities, misconfigurations, weak controls, and identity risks.

·       Develop exploit Proof-of-Concepts (PoCs), validate impact, and provide practical remediation guidance.

·       Perform manual testing beyond automated scanner results and validate remediation through retesting.

·       Understand customer business models, critical workflows, applications, data flows, technology architecture, and critical assets before testing.

·       Translate business requirements and threat scenarios into an appropriate penetration testing strategy.

·       Prioritize findings using business criticality, exploitability, exposure, attack path, data sensitivity, and potential operational or financial impact.

·       Design realistic attack scenarios relevant to the customer's industry and threat landscape.

·       Translate technical weaknesses into business risk and provide practical recommendations aligned with operational constraints.

·       Conduct adversary simulation and advanced penetration testing activities where applicable.

·       Perform attack-path analysis covering initial access, privilege escalation, credential compromise, lateral movement, persistence, defense evasion, and controlled data-access/exfiltration simulation.

·       Perform Active Directory security assessments and identify privilege-escalation and identity attack paths.

·       Conduct cloud attack-path assessments across AWS/Azure environments.

·       Research emerging vulnerabilities, exploits, TTPs, and offensive security techniques.

·       Perform comprehensive manual Web and API testing aligned with OWASP Top 10, OWASP API Security Top 10, and OWASP WSTG.

·       Test authentication, authorization, session management, access controls, business logic, input validation, API security, and sensitive-data exposure.

·       Assess and exploit vulnerabilities such as IDOR/BOLA, privilege escalation, SSRF, injection, authentication bypass, business-logic flaws, and insecure deserialization.

·       Perform business-logic testing based on real application functionality and customer workflows.

·       Assess AWS/Azure IAM, networking, storage, workloads, secrets, security groups/NSGs, logging, and configuration controls.

·       Identify attack paths across cloud identities, workloads, storage, and network components.

·       Perform internal and external network/infrastructure penetration testing and Active Directory/Windows security assessments.

·       Work closely with the SOC team to support proactive threat hunting across SIEM, XDR/EDR, network, endpoint, identity, and cloud telemetry.

·       Develop and execute threat-hunting hypotheses based on emerging threats, MITRE ATT&CK techniques, threat intelligence, observed attacker TTPs, and organizational risk.

·       Support advanced investigations involving suspicious activity, compromised accounts, malware, lateral movement, privilege escalation, persistence, and potential data compromise.

·       Correlate penetration-testing findings and attack paths with SOC detections to identify monitoring gaps and improve detection coverage.

·       Provide technical advisory to SOC analysts during complex investigations and help validate attack techniques through controlled simulations.

·       Recommend new detection use cases, telemetry requirements, investigation playbooks, and threat-hunting queries based on offensive-security findings.

·       Participate in incident investigations as a subject-matter expert for exploitation, attacker behavior, and attack-path analysis.

·       Conduct purple-team style validation where required to verify whether SOC controls can detect and respond to realistic attack techniques.

·       Provide security advisory to application, infrastructure, cloud, DevOps, SOC, and security teams.

·       Review architecture, security controls, and proposed remediation approaches from an attacker perspective.

·       Advise on security improvements based on penetration-testing findings, threat intelligence, incident observations, and emerging attack techniques.

·       Support security design reviews and provide practical recommendations that balance security and business requirements.

·       Develop scripts and automation to improve penetration-testing and security-investigation efficiency.

·       Create custom tools, payloads, PoCs, and exploit scripts where required.

·       Use Python, PowerShell, and Bash for security automation, testing, and investigation support.

·       Understand exploit code and modify publicly available PoCs safely for authorized assessment activities.

·       Prepare high-quality technical and executive-level penetration-testing reports.

·       Document vulnerability details, evidence, business impact, risk, attack paths, PoCs, and remediation recommendations.

·       Present findings to technical teams, security leadership, and business stakeholders.

·       Conduct client walkthroughs, remediation discussions, and vulnerability-closure/retest sessions.

·       Own penetration-testing engagements independently with minimal supervision.

·       Define methodology, testing approach, effort estimates, dependencies, and timelines.

·       Handle complex and ambiguous security problems and take ownership of deliverable quality.

·       Mentor junior testers through technical guidance and knowledge sharing.

·       Improve internal PT methodologies, checklists, tooling, automation, and reporting standards.

·       Contribute to security research, labs, offensive-security capability development, and service improvement.

·       Burp Suite Professional

·       OWASP ZAP

·       Postman

·       SQLMap

·       Nuclei

·       Manual exploitation and business-logic testing

·       OWASP WSTG and OWASP API Security Top 10

·       Nmap

·       Nessus / OpenVAS

·       Metasploit

·       Netcat

·       Responder

·       Impacket

·       NetExec / CrackMapExec

·       Hydra

·       Wireshark

·       BloodHound / SharpHound

·       PowerView

·       Mimikatz

·       Rubeus

·       Impacket

·       Kerberoasting / AS-REP Roasting

·       NTLM attacks

·       Pass-the-Hash / Pass-the-Ticket

·       Privilege escalation and AD attack-path analysis

·       AWS / Azure security fundamentals

·       IAM security and cloud privilege escalation

·       Cloud networking and storage security

·       Security groups / NSGs

·       Cloud misconfiguration assessment

·       Cloud attack-path analysis

·       Cobalt Strike or equivalent

·       Sliver / Metasploit

·       Command-and-control concepts

·       Phishing simulation

·       Credential attacks

·       Lateral movement

·       Privilege escalation

·       Persistence and defense-evasion concepts

·       MITRE ATT&CK

·       Strong hands-on ability in at least two of Python, PowerShell, Bash, JavaScript, or SQL.

·       Ability to develop security automation, custom PoCs, payloads, testing scripts, and security utilities.

·       OWASP Top 10, OWASP API Security Top 10, OWASP WSTG, MITRE ATT&CK, PTES, NIST security concepts, CVSS, CWE, and common vulnerability assessment methodologies.

·       Knowledge of PCI DSS, ISO 27001, SOC 2, and other regulatory/security requirements is preferred.