Penetration Tester || Remote

DMS Vision • Frisco, TX

7h • Remote

About The Position

The Penetration Tester is a hands-on security professional who conducts enterprise-wide penetration testing and Red Team activities. The role includes testing network, web application, mobile, database, operating system, and other environments; researching vulnerabilities; developing and executing exploits and payloads; and helping improve cyber defense monitoring and alerting. The position emphasizes manual testing, custom scripting, attack development, and evasion testing. Reverse engineering, malware development, and reporting newly discovered vulnerabilities to vendors are preferred areas of experience.

The role is offered remotely to candidates located in Illinois, Texas, Florida, Georgia, Massachusetts, Maryland, Minnesota, North Carolina, New Jersey, New York, Washington, D.C., or Wisconsin. Alternatively, it may be performed in a hybrid arrangement in Chicago, Illinois, or Dallas, Texas. The stated duration is six months or longer. The posting says candidates must not require H-1B sponsorship.

Requirements

• At least 3 years of penetration testing experience.
• At least 5 years of experience in an Information Assurance or Information Security environment.
• Strong proficiency in network, web application, and mobile device security testing.
• Demonstrated experience developing exploits, payloads, and attack frameworks.
• Strong knowledge of EDR detection capabilities, such as CrowdStrike or Carbon Black, and defense-evasion techniques for behavioral alerting.
• Strong proficiency in social engineering and intelligence gathering.
• Strong experience with custom scripting and process automation, including Python, PowerShell, or Bash.
• Knowledge of building C2 infrastructure and conducting defense-evasion testing to enhance monitoring and alerting for C2 traffic.
• Strong understanding of security vulnerabilities and the ability to develop relevant exploits and payloads for Red Team activities.
• Strong experience with database security testing, including MSSQL, DB2, or MySQL.
• Proficiency with penetration-testing tools, including Kali, Armitage, Metasploit, Cobalt Strike, Nighthawk, Nmap, Qualys, Nessus, Burp Suite, Wireshark, Recon-NG, Ettercap/Bettercap, Hashcat, Bloodhound, IDA Pro, Ghidra, Sublist3r, Rubeus, Mimikatz, CrackMapExec, Exploitdb, Yersinia, and Impacket.
• Experience with vulnerability research and CVE assignments.
• Knowledge of Windows APIs and Living off the Land (LOL) binaries.
• Experience with mainframes, Windows, Unix, macOS, Cisco platforms, and controls.
• Candidates must not require H-1B sponsorship.

Nice To Haves

• Reverse-engineering experience.
• Heavy manual web penetration testing experience.
• Malware-development experience.
• Experience finding previously undiscovered bugs and reporting them to vendors.
• A BS in Computer Science, Information Management, Information Security, or a comparable technical degree from an accredited college or university.
• Professional security certifications such as OSCP, OSWE, GXPN, GMOB, or GWAPT; the posting also mentions Hack The Box, bug bounty, OCSP, and GXPN credentials or experience.

Responsibilities

• Perform penetration testing of networks, web applications, mobile devices, databases, and other systems.
• Conduct hands-on Red Team activities, including exploit, payload, and attack-framework development.
• Develop and use custom scripts and automation for security testing.
• Build command-and-control (C2) infrastructure and test cyber defense evasion and C2 traffic monitoring capabilities.
• Assess EDR detection capabilities and associated defenses against behavioral alerts.
• Conduct social engineering and intelligence gathering.
• Research vulnerabilities, develop relevant exploits or payloads, and report previously undiscovered bugs to vendors.
• Test database security across platforms such as MSSQL, DB2, and MySQL.
• Work across enterprise platforms and controls, including mainframes, Windows, Unix, macOS, and Cisco environments.

What This Job Offers

• Career Level: Mid Level