Network Penetration Testing

Network Penetration Testing Engineer Jobs

2 jobs found

Today

Senior Penetration Tester / Red Team Engineer

Cognizant New York, NY

New York, NY

Today

$134k - $155k/yr Full time Senior Api Penetration Testing Application Security

Apply Now

Job Description

Lead offensive security efforts to uncover exploitable weaknesses and strengthen enterprise cyber resilience through evidence-based penetration testing.

Responsibilities

Conduct comprehensive penetration testing across web applications, APIs, networks, cloud environments, mobile applications, and Windows/Linux systems.
Run vulnerability assessments using automated scanning platforms and manual testing to identify security weaknesses.
Simulate realistic adversary scenarios to evaluate authentication, authorization, access controls, network defenses, and overall security resilience.
Identify and validate vulnerabilities, misconfigurations, exposed credentials, insecure code, and potential attack paths across enterprise environments.
Use offensive security tools including Burp Suite, Metasploit, Nmap, Kali Linux, Pentera, and vulnerability scanning platforms.
Develop Python and Bash scripts, automation utilities, and custom testing approaches to improve testing efficiency and coverage.
Produce documentation covering assessment methodologies, technical evidence, risk impact, and findings, with clear remediation recommendations for stakeholders.
Collaborate with application, infrastructure, cloud, and security teams to remediate findings and validate fixes via retesting.
Research emerging threats, CVEs, OWASP vulnerabilities, exploitation techniques, and evolving offensive security methodologies.
Support security assessments, compliance initiatives, risk reviews, and continuous improvement of enterprise offensive security capabilities.

Requirements

8+ years of hands-on experience in Penetration Testing, Red Teaming, Offensive Security, or Security Engineering.
Expert-level experience delivering penetration tests across web applications, networks, APIs, endpoints, cloud platforms, and enterprise infrastructure.
Strong expertise in vulnerability exploitation, attack-path analysis, credential security, authentication testing, and security control validation.
Advanced hands-on experience with offensive security tools: Burp Suite, Metasploit, Nmap, Kali Linux, Pentera Console/Surface, and vulnerability scanners.
Strong scripting and automation skills using Python, Bash, PowerShell, or similar technologies.
Deep understanding of OWASP, CVE/CVSS, MITRE ATT&CK, network security, application security, and modern attack methodologies.
Experience working with development and infrastructure teams to provide remediation guidance and perform validation/retesting of security fixes.
Strong technical reporting skills, with the ability to communicate vulnerabilities, business impact, and remediation priorities to technical and leadership audiences.
Relevant certifications are preferred: OSCP, OSEP, OSWE, GPEN, GXPN, CRTO, or equivalent offensive security certifications.

Technologies

Burp Suite
Metasploit
Nmap
Kali Linux
Pentera
Pentera Console/Surface
Python
Bash
PowerShell
OWASP
CVE/CVSS
MITRE ATT&CK

Benefits

Medical/Dental/Vision/Life Insurance
Paid holidays plus Paid Time Off
401(k) plan and contributions
Long-term/Short-term Disability
Paid Parental Leave
Employee Stock Purchase Plan

Salary and other compensation

Annual salary: $134,000 - $154,500 per year, depending on experience and other qualifications.
Eligible for Cognizant’s discretionary annual incentive program, subject to plan terms and performance.

View full job page →

11d ago

Cyber Security Engineer – Penetration Tester (Journeyman)

OneZero Solutions Washington, DC

Washington, DC

11d ago

Full time Cybersecurity Tools Data Security Information Security

Apply Now

Job Description

OneZero Solutions supports the U.S. Coast Guard with cyber defense initiatives through hands-on penetration testing and adversary emulation. This journeyman-level role (Washington, DC hybrid) helps strengthen operational cyber security by delivering practical assessments, actionable reporting, and training support for DoD Cyber Protection Teams.

Responsibilities

Assess the cyber security posture of Coast Guard operational networks through adversary emulation.
Conduct red team operations, penetration tests, and phishing assessments.
Perform cyber threat emulation during scripted exercises to train DoD Cyber Protection Teams.
Deploy, configure, and operate Command and Control (C2) frameworks such as Cobalt Strike, Havoc, Mythic, and Sliver.
Apply tactics, techniques, and procedures (TTPs) covering initial access, lateral movement, privilege escalation, persistence, and data exfiltration.
Use proprietary and open-source offensive security tool sets effectively to achieve engagement objectives.
Monitor, manage, and maintain the cloud and on-premise infrastructure used during assessments.
Use Git repositories to maintain operational tools and scripts.
Execute internal and external penetration testing, including network mapping and enumeration.
Assess web and mobile applications and perform database scans.
Assess Active Directory attack paths using tools such as BloodHound.
Develop reports and briefs detailing findings and recommendations for completed assessments.

Requirements

2 to 3 years of relevant experience (minimum 2 years).
Active Top Secret security clearance with SCI eligibility.
Hands-on experience with computers and network security.
Experience conducting phishing campaigns or social engineering.
Hands-on experience with red team tasks and penetration testing.
Familiarity with malware development and EDR/AV bypass strategies.
Experience with PowerShell, C, C++, or Python.
Hands-on experience using C2 frameworks such as Cobalt Strike, Sliver, Havoc, or similar.
Bachelor’s degree (BA/BS) or equivalent years of relevant experience.

Technologies

Cobalt Strike, Havoc, Mythic, Sliver
Git, BloodHound
PowerShell, C, C++, Python
EDR/AV

Benefits

Health insurance
Dental insurance
Vision insurance
Life insurance
401(k) with company matching
Paid time off and holidays
Employee referral program
Educational assistance

Security Clearance

Top Secret

Preferred Qualifications

Experience supporting Red Team or offensive cybersecurity operations.
Experience with web application, network, wireless, cloud, or infrastructure penetration testing.
Familiarity with tools such as Nmap, Burp Suite, Metasploit, BloodHound, Wireshark, or similar.
Knowledge of common attack frameworks and methodologies, including MITRE ATT&CK.
Experience developing penetration testing reports and presenting technical findings.
Active industry-recognized cybersecurity certifications such as OSCP, CEH, PenTest+, GPEN, or comparable certifications.

Certifications

Candidates must hold a DoD 8570/8140-compliant Information Assurance Technical (IAT) Level II or Level III certification, along with an offensive security certification.

Offensive Security Certification (any one): GIAC Penetration Tester (GPEN); Red Team Apprentice Course (RTAC); or equivalent
IAT Level II (any one, or one of the IAT Level III certifications noted below): CompTIA Security+ CE; CompTIA CySA+; CCNA Security; GICSP; GSEC; SSCP
IAT Level III (any one): CompTIA CASP+ CE (SecurityX); CISSP (or Associate); CISA; CCNP Security; GCED; GCIH

View full job page →

Network Penetration Testing Engineer Jobs

Senior Penetration Tester / Red Team Engineer

Cyber Security Engineer – Penetration Tester (Journeyman)

Get Network Penetration Testing Engineer Jobs alerts