Overview
The contract Penetration Tester will enhance the offensive security capabilities of a well-established technology company by conducting hands-on testing across various environments, including infrastructure, cloud, and applications. This role involves collaborating with both technical and senior management teams, translating technical findings into clear reports, and contributing to red and purple team activities.
Responsibilities
- Conduct hands-on penetration testing across infrastructure, cloud, and web application environments.
- Identify and exploit Active Directory attack paths.
- Develop and implement custom tools using scripting languages such as Python and PowerShell.
- Produce clear and actionable reports for both technical and non-technical audiences.
- Engage in red and purple team exercises as required.
- Collaborate with team members to communicate testing outcomes effectively.
Requirements
- Proficient in penetration testing methodologies for infrastructure, cloud, and web applications.
- Strong understanding of Active Directory security and attack vectors.
- Experience in scripting for automation or tool development in Python, PowerShell, or similar languages.
- Ability to write detailed reports for diverse audiences.
- OSCP certification or equivalent is highly desirable.