Penetration Tester / Ethical Hacker

Support global information security effectiveness through penetration testing and red team engagements across modern environments.

Responsibilities

• Plan and execute penetration tests across web applications, APIs, mobile apps, networks, cloud infrastructure (AWS, Azure, GCP), and internal systems.
• Perform manual exploitation and vulnerability validation to reduce false positives and uncover logic flaws automated tooling may miss.
• Design, configure, and run automated vulnerability scanning pipelines to increase coverage and consistency across engagements.
• Build and deploy AI-agent-driven testing workflows to accelerate reconnaissance, fuzzing, exploit chaining, and report generation.
• Run red team engagements simulating APT tactics, techniques, and procedures (TTPs), with tracking and documented activity.

Requirements

• 3+ years of direct experience performing penetration testing, red teaming, or ethical hacking in an active corporate environment.
• Ability to plan and execute penetration tests and red team engagements, including comfort operating in terminal environments.
• Working knowledge of common networking protocols: HTTP, DNS, SMB, and related fundamentals.
• Familiarity with Windows and Linux systems.
• Proficiency with cross-platform scripting languages such as Python or Golang, and PowerShell.
• Hands-on experience with industry-standard tools including Burp Suite, Metasploit, Nmap, Wireshark, Cobalt Strike, BloodHound, and the Kali Linux toolset.

Tech Stack

• Cloud: AWS, Azure, GCP
• Scripting: Python, Golang, PowerShell
• Security testing tools: Burp Suite, Metasploit, Nmap, Wireshark, Cobalt Strike, BloodHound, Kali Linux
• Protocols: HTTP, DNS, SMB

Location and Work Details

• Location: New York, NY (remote)
• Timezone: Remote (EST hours)
• Salary: USD 70 per hour
• Employment type: W-2 only

What’s In It For Me?

• Drive real security value by improving the effectiveness of information security capabilities across business units.
• Work on advanced testing approaches combining manual exploitation with automated scanning and AI-agent-driven workflows.
• Perform threat-informed testing by analyzing cyber threat intelligence for actionable takeaways.
• Create executive-ready and client-ready documentation via executive summaries and in-depth technical reporting.
• Collaborate with teams by translating testing objectives and findings into plain English and actionable remediation guidance.