Senior Penetration Tester / Red Team Engineer

Lead offensive security efforts to uncover exploitable weaknesses and strengthen enterprise cyber resilience through evidence-based penetration testing.

Responsibilities

• Conduct comprehensive penetration testing across web applications, APIs, networks, cloud environments, mobile applications, and Windows/Linux systems.
• Run vulnerability assessments using automated scanning platforms and manual testing to identify security weaknesses.
• Simulate realistic adversary scenarios to evaluate authentication, authorization, access controls, network defenses, and overall security resilience.
• Identify and validate vulnerabilities, misconfigurations, exposed credentials, insecure code, and potential attack paths across enterprise environments.
• Use offensive security tools including Burp Suite, Metasploit, Nmap, Kali Linux, Pentera, and vulnerability scanning platforms.
• Develop Python and Bash scripts, automation utilities, and custom testing approaches to improve testing efficiency and coverage.
• Produce documentation covering assessment methodologies, technical evidence, risk impact, and findings, with clear remediation recommendations for stakeholders.
• Collaborate with application, infrastructure, cloud, and security teams to remediate findings and validate fixes via retesting.
• Research emerging threats, CVEs, OWASP vulnerabilities, exploitation techniques, and evolving offensive security methodologies.
• Support security assessments, compliance initiatives, risk reviews, and continuous improvement of enterprise offensive security capabilities.

Requirements

• 8+ years of hands-on experience in Penetration Testing, Red Teaming, Offensive Security, or Security Engineering.
• Expert-level experience delivering penetration tests across web applications, networks, APIs, endpoints, cloud platforms, and enterprise infrastructure.
• Strong expertise in vulnerability exploitation, attack-path analysis, credential security, authentication testing, and security control validation.
• Advanced hands-on experience with offensive security tools: Burp Suite, Metasploit, Nmap, Kali Linux, Pentera Console/Surface, and vulnerability scanners.
• Strong scripting and automation skills using Python, Bash, PowerShell, or similar technologies.
• Deep understanding of OWASP, CVE/CVSS, MITRE ATT&CK, network security, application security, and modern attack methodologies.
• Experience working with development and infrastructure teams to provide remediation guidance and perform validation/retesting of security fixes.
• Strong technical reporting skills, with the ability to communicate vulnerabilities, business impact, and remediation priorities to technical and leadership audiences.
• Relevant certifications are preferred: OSCP, OSEP, OSWE, GPEN, GXPN, CRTO, or equivalent offensive security certifications.

Technologies

• Burp Suite
• Metasploit
• Nmap
• Kali Linux
• Pentera
• Pentera Console/Surface
• Python
• Bash
• PowerShell
• OWASP
• CVE/CVSS
• MITRE ATT&CK

Benefits

• Medical/Dental/Vision/Life Insurance
• Paid holidays plus Paid Time Off
• 401(k) plan and contributions
• Long-term/Short-term Disability
• Paid Parental Leave
• Employee Stock Purchase Plan

Salary and other compensation

• Annual salary: $134,000 - $154,500 per year, depending on experience and other qualifications.
• Eligible for Cognizant’s discretionary annual incentive program, subject to plan terms and performance.