Cybersecurity Penetration Tester

Salary: $139,360 - 139,360 per year

Requirements:

• At least 3 years of direct experience in penetration testing or ethical hacking, preferably in an active corporate environment; this is not an entry-level role.
• Demonstrated experience planning and conducting penetration tests and red team engagements.
• Hands-on knowledge of manual security testing, low-level and web application functionality, IT security, and vulnerability and threat management.
• Ability to work in terminal environments, interpret architectural documents, and assess systems strategically.
• Working knowledge of networking protocols such as HTTP, DNS, and SMB, and familiarity with Windows and Linux systems.
• Proficiency in cross-platform scripting languages such as Python or Golang, as well as PowerShell.
• Experience with cloud and related technologies, including AWS, Azure, O365, GCP, and containers.
• Proficiency with security testing tools such as Burp Suite, Metasploit, Nmap, Wireshark, Cobalt Strike, BloodHound, and the Kali Linux toolset.
• Practical experience integrating AI- or LLM-based agents or copilots into security testing workflows, such as AI-assisted reconnaissance, exploit suggestions, or agentic fuzzing.
• Ability to analyze cyber threat intelligence and apply knowledge of current threats and adversary tactics to identify and assess attack paths.
• Strong analytical, planning, organizational, and prioritization skills, with initiative, attention to detail, and the ability to manage changing priorities and deadlines.
• Strong written and verbal communication skills, including the ability to explain objectives, findings, and risks clearly to technical teams, business leaders, and clients.
• Professional interpersonal and customer-service skills, and the ability to collaborate across teams and work with diverse stakeholders.
• Ability to prepare client-ready documentation and participate in client meetings; working knowledge of project management principles, processes, and documentation.
• Relevant industry certifications are preferred, such as OSCP, OSCE, OSWE, GPEN, GXPN, CEH, or CISSP.
• A bachelors degree in information technology, computer science, quality assurance, or an equivalent qualification is preferred.

Responsibilities:

• Plan and conduct penetration tests across web applications, APIs, mobile applications, networks, cloud infrastructure, and internal systems.
• Manually exploit and validate vulnerabilities to reduce false positives and identify logic flaws that automated tools may miss.
• Design, configure, and operate automated vulnerability-scanning pipelines to improve testing coverage and consistency.
• Develop and deploy AI-agent-driven workflows for reconnaissance, fuzzing, exploit chaining, and report generation.
• Assess environments from an adversarys perspective, prioritize vulnerable assets, and identify and test potential attack paths.
• Identify security risks, threats, misconfigurations, and vulnerabilities in networks, systems, and applications, and develop remediation solutions.
• Conduct red team engagements that simulate advanced persistent threat tactics, techniques, and procedures.
• Track and document testing activities, communicate updates to leadership, and prepare executive summaries and detailed technical reports.
• Explain findings and associated business risks, identify reporting gaps, and provide technical remediation guidance to operations teams.

Technologies:

• AI
• AWS
• Azure
• Cloud
• GCP
• Golang
• HTTP
• LLM
• Linux
• Mobile
• PowerShell
• Python
• Security
• SMB
• Web
• Windows
• Office 365

More:

We are recruiting a Penetration Tester / Ethical Hacker for a clients Information Security team through RedStream Technology. This is a contract position based onsite in Midtown Manhattan, New York City, with in-person work required. The role focuses on strengthening the clients cybersecurity posture through penetration testing, red team engagements, and offensive security assessments. The pay rate is $67 per hour.

last updated 43 week of 2026