About the Role

Our client, a rapidly growing cybersecurity consultancy, is looking for a skilled and motivated Remote Penetration Tester to join their elite team. This is a 100% remote role, allowing you to work from any location in the United States. You will be responsible for conducting comprehensive security assessments and penetration tests on a wide range of client systems, applications, and networks to identify vulnerabilities and provide actionable recommendations for remediation. The ideal candidate is a highly ethical hacker with a passion for uncovering security flaws and a deep understanding of various attack vectors and exploitation techniques. This role is essential in helping our clients strengthen their security defenses against real-world threats. As a remote-first company, we provide the tools and support necessary for you to excel in your role from your home office.

Key Responsibilities

Perform authorized penetration tests against client networks, web applications, mobile applications, and cloud environments. Identify, analyze, and document security vulnerabilities and their potential impact. Develop and utilize exploits and custom tools to demonstrate the severity of discovered vulnerabilities. Provide clear, concise, and actionable recommendations for remediation to clients. Conduct vulnerability assessments and security audits as required. Stay up-to-date with the latest penetration testing techniques, tools, and threat landscapes. Collaborate with clients to understand their security needs and scope testing engagements. Generate detailed penetration test reports, including findings, executive summaries, and remediation plans. Contribute to the development of internal testing methodologies and tools. Participate in knowledge sharing sessions and team training.

Requirements

Bachelor's degree in Computer Science, Cybersecurity, or a related technical field, or equivalent practical experience. Minimum of 3 years of hands-on experience in penetration testing and vulnerability assessment. Proficiency with a variety of penetration testing tools and frameworks (e.g., Metasploit, Burp Suite, Nmap, OWASP ZAP). Strong understanding of network protocols, operating systems (Windows, Linux), and web technologies. Experience with scripting languages such as Python, PowerShell, or Bash for tool development and automation. Knowledge of common vulnerabilities and attack vectors (e.g., SQL injection, XSS, CSRF, buffer overflows). Excellent analytical and problem-solving skills, with a keen eye for detail. Strong written and verbal communication skills, with the ability to articulate technical findings to both technical and non-technical audiences. Ability to work independently and manage time effectively in a remote setting. Relevant certifications such as OSCP, CEH, GPEN, or GWAPT are highly desirable.

Benefits

Our client offers a competitive salary, comprehensive health, dental, and vision insurance, and a 401(k) plan with company matching. As a fully remote position, employees receive a stipend for home office expenses and are provided with the necessary equipment and software. Opportunities for continuous learning, attending industry conferences, and obtaining advanced certifications are encouraged and supported. Join a dedicated team that values expertise, integrity, and making a tangible difference in cybersecurity.