Senior Penetration Tester

About the role

Reporting directly to the Offensive Security Manager, you will be the technical tip of the spear in proactively identifying and exploiting vulnerabilities across our entire technology estate. In this senior technical role, you will lead complex, full-stack security assessments ranging from modern web applications and complex APIs to cloud infrastructure, CI/CD pipelines, and deep-dive Active Directory environments.

What you'll do

• Actively test and identify misconfigurations or vulnerabilities within our CI/CD pipelines to secure our software supply chain
• Infrastructure & Active Directory: Execute internal network penetration tests, including advanced Active Directory abuse and exploitation (e.g., Kerberoasting
• Be the technical tip of the spear in proactively identifying and exploiting vulnerabilities across our entire technology estate
• Lead complex, full-stack security assessments ranging from modern web applications and complex APIs to cloud infrastructure, CI/CD pipelines
• Partner closely with our engineering teams to ensure vulnerabilities are understood and effectively remediated

What you need

• 7–13 yrs of experience
• Penetration testing
• OWASP
• Python
• CI/CD
• Active Directory
• Docker
• Any graduate

Good to have

• Kubernetes
• Git
• Jenkins
• Bash
• Go
• PowerShell