Penetration Tester

Job summary

Conduct penetration tests across infrastructure, cloud assets, and client applications, including reconnaissance, vulnerability scanning, exploitation, and lateral movement. Produce detailed findings and remediation reports, improve testing processes, help develop offensive security tools and payloads, and support client risk-reduction goals.

Job details

Job description About SecuSolutions SecuSolutions is in the business of providing essential security solutions that safeguard mission critical infrastructure and data. For more than 21 years, founding members, key staff and management have worked directly in the field of cyber security. We have served Large Enterprises and Small to Medium Sized Businesses around the globe. Our Security Professionals hold some of the most esteemed certifications in the industry. SecuSolutions offers the following services: Online Security Training Phishing Simulations Vulnerability Assessments Deep Web Analysis Penetration testing, Red Teaming, and Scenario-based engagements USB Drop Simulations Security Audits, NIST, ISO SOC 2 readiness What we can offer you: Full remote work, for the last 17+ years and counting (we did it before it was cool). Support for advancement of educational goals. Calgary office location is available if desired. Exposure to a wide array of technologies and fields related to offensive cyber security. Opportunity to work with a variety of technologies in diverse customer environments ranging from mid-sized organizations to large enterprise environments. A position on our highly experienced close-knit team, where we love helping each other grow. Professional Qualifications and Expertise - preference will be given to candidates who have: At least one of the following certifications: OSCP, OSEP, GIAC, PNPT, eCCPTv2. Hands-on experience with open-source, commercial penetration testing tools, and C2 Frameworks Knowledge of common penetration testing standards, methodology, and framework (e.g., MITRE ATT&CK, PTES, OWASP, CREST, OSSTMM, CWE, CAPEC, CVE, CVSS, NIST, etc). Knowledge of the latest attack trends, tools, and the threat landscape. Penetration testing experience in internal network with Active Directory, or Hybrid infrastructure. Knowledge or experience evading EDR, XDR, MDR, AV, etc. Familiarity with Windows Internals. Proficiency in one or more programming languages. Proficiency in scripting languages. Responsibilities: Perform penetration testing against infrastructures, cloud assets, and client applications. Conduct open-source intelligence gathering, network vulnerability scanning, exploitation of vulnerable services, lateral movement. Create deliverables such as a detailed report on findings, and remediation. Support the improvement of testing process. Assist in the development of payloads, and or tools for exploiting, evading, and lateral movement. Assist in client and organization goals to drive risk reduction. Desirable Skills: Ability to learn technologies, frameworks, and concepts in a self-directed manner. Ability to work independently and as a member of a remote team. Effective communicator of technical and business information, both verbal and written. Excellent written and oral communications skills (English). Proven troubleshooting and problem-solving ability. Strong customer service. Ability to work independently and with a team. Strong time management. Excellent troubleshooting/problem solving/analytics skillset.

What you’ll do

Conduct penetration tests across infrastructure, cloud assets, and client applications, including reconnaissance, vulnerability scanning, exploitation, and lateral movement. Produce detailed findings and remediation reports, improve testing processes, help develop offensive security tools and payloads, and support client risk-reduction goals.

Requirements

Candidates are preferred to have at least one listed penetration-testing certification, hands-on experience with testing tools and command-and-control frameworks, and knowledge of security methodologies, current attack trends, and threat landscapes. Relevant experience includes internal network testing with Active Directory or hybrid infrastructure, security-tool evasion, Windows internals, programming, and scripting; strong communication, independent learning, teamwork, and problem-solving skills are also sought.

Benefits

• Full Remote Work
• Educational Advancement Support

Listed skills

• Active Directory · Preferred
• Troubleshooting · Preferred
• Problem solving · Preferred

Other relevant skills

Identified from the job description. Confirm important requirements above.

• Penetration Testing
• Active Directory
• Cloud Security
• Open-Source Intelligence
• Network Vulnerability Scanning
• Exploitation
• Lateral Movement
• EDR Evasion
• Windows Internals
• Programming
• Scripting
• Security Reporting
• Troubleshooting
• Problem-Solving
• Technical Communication

Job areas

• Technology
• Security & Safety
• Software