Penetration Tester - Infrastructure & Red Team

Packetlabs is hiring for an infrastructure penetration testing and red team role focused on hands-on offensive security across hybrid and cloud environments.

Responsibilities

• Plan and execute infrastructure penetration testing engagements across on-premises, hybrid, cloud, wireless, and enterprise network environments
• Conduct internal and external network penetration testing to identify, validate, and exploit vulnerabilities using manual testing methodologies and industry-standard offensive security tools
• Assess enterprise technologies including Active Directory, Microsoft Entra ID (Azure AD), Windows and Linux environments, virtualization platforms, cloud services, and supporting infrastructure
• Evaluate cloud environments for configuration weaknesses, privilege escalation paths, identity risks, and cloud security vulnerabilities across AWS, Microsoft Azure, and Google Cloud Platform
• Assess containerized environments, Kubernetes platforms, CI/CD pipelines, and cloud-native technologies where applicable
• Participate in and lead adversary simulation, red team, and objective-based security engagements aligned to established methodologies and client objectives
• Execute offensive security operations across the attack lifecycle, including reconnaissance, initial access, persistence, privilege escalation, credential access, lateral movement, defense evasion, command and control, and objective execution
• Support purple team engagements by collaborating with defensive teams to validate detections, improve monitoring, and strengthen defensive controls
• Develop and run attack scenarios that demonstrate realistic business impact while maintaining client system integrity
• Produce comprehensive technical reports covering vulnerabilities, attack paths, business impact, risk ratings, and remediation recommendations
• Present assessment findings to technical teams, executive stakeholders, and client leadership
• Provide technical guidance on remediation strategies, security architecture, and defensive improvements
• Manage assigned engagements to maintain delivery quality, timelines, and client expectations
• Maintain expertise in offensive security methodologies, infrastructure security, cloud technologies, Active Directory security, and emerging attack techniques
• Contribute to the development and continuous improvement of testing methodologies, internal tooling, technical documentation, and service offerings
• Participate in technical research, automation initiatives, internal training, and knowledge-sharing activities
• Collaborate with consulting teams to strengthen technical quality, consistency, and service delivery across the Offensive Security practice
• Perform other duties as assigned

Requirements

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related discipline; equivalent practical experience will be considered
• Minimum of 3 years of professional experience in infrastructure penetration testing, red teaming, adversary simulation, or offensive security consulting
• Demonstrated experience conducting penetration testing across enterprise infrastructure, including Windows, Linux, Active Directory, Microsoft Entra ID, cloud platforms, and enterprise networking
• Experience with internal and external network penetration testing, privilege escalation, Active Directory security assessments, and lateral movement testing
• Experience assessing cloud environments, including AWS, Microsoft Azure, or Google Cloud Platform
• Strong understanding of enterprise networking, authentication technologies, identity management, cloud security, and offensive security methodologies
• Experience using industry-standard offensive security frameworks, tools, and tradecraft
• Excellent technical writing, presentation, and communication skills for both technical and executive audiences

Technologies

• Active Directory
• Microsoft Entra ID (Azure AD)
• Windows
• Linux
• AWS
• Microsoft Azure
• Google Cloud Platform
• Kubernetes
• CI/CD pipelines

Benefits

• Competitive compensation and growth opportunity
• Paid education and professional development reimbursement to support continued learning, certifications, and technical growth
• Flexible work environment that empowers employees to do their best work
• Paid volunteer day each year
• Paid Birthday day off
• Paid U.S. public holidays
• Fully remote within Texas or Florida

Additional Details

• Location: Texas (onsite)
• Salary: USD 90,000 - 130,000 per year

Who You Are

• Industry certifications such as OSCP, OSEP, CRTO, CRTE, CARTP, CARTA, CREST CRT, CREST CCT, PNPT, GPEN, GXPN, or equivalent are considered an asset
• OSCP or equivalent demonstrated technical capability is strongly preferred
• Experience participating in Red Team, Purple Team, adversary simulation, or threat emulation engagements is considered an asset
• Customer-first mentality with strong communication and rapid, on-time responses
• Pride in delivering high-quality work
• Deep investigation mindset with focus on proving impact
• Comfort working through obstacles and adapting in changing consulting environments
• Self-motivated and dependable with a humble attitude

How Success Is Defined

• Successful delivery of infrastructure penetration testing and adversary simulation engagements within quality, budget, and timeline expectations
• Accuracy, completeness, and technical quality of client reports and deliverables
• Proven expertise across enterprise infrastructure, cloud security, Active Directory, and offensive security methodologies
• Positive client feedback regarding technical expertise, communication, and professionalism
• Contribution to technical research, methodology development, automation, and knowledge-sharing initiatives
• Effective collaboration with Delivery Managers, Project Managers, and consulting team members
• Ongoing professional development through certifications, research, and technical skill advancement