Lead/Senior Penetration Tester

ITFS is offering a remote position for a Lead/Senior Penetration Tester.

• Minimum 5 years experience as a Penetration Tester or in offensive security
• Experience with penetration testing of web applications, networks, mobile applications, and Active Directory environments
• Strong knowledge of tools such as Burp Suite, Nmap, Metasploit, BloodHound, Impacket, CrackMapExec/NetExec, Cobalt Strike, Nessus, or OpenVAS
• Practical knowledge of Windows and Linux systems, computer networks, authentication, and post-exploitation techniques
• Ability to script in Python, PowerShell, or Bash
• Experience managing projects and cooperating with clients
• Skills in report preparation and presenting results to technical and business audiences
• Possession of at least one certification: OSCP, CREST CRT/CPSA, CRTP, or CRTO
• English language proficiency at minimum B2+/C1 level
• Higher education in computer science, cybersecurity, or a related field, or equivalent experience

Nice to have:

• Certifications such as OSEP, OSWE, OSED, CRTE, CREST CCT, GXPN, GWAPT, GPEN, GMOB, or cloud security certifications
• Experience with penetration testing in AWS, Azure, GCP, and Kubernetes environments

• Independently conduct penetration testing projects for web applications, APIs, networks, Active Directory environments, mobile applications, and cloud
• Perform manual security tests and verify vulnerabilities found by automated tools
• Create scripts, tools, and Proof of Concept (PoC) exploits to support testing
• Conduct retests and confirm effectiveness of implemented security fixes
• Prepare technical reports and present results to technical and business clients
• Manage project execution, collaborate with clients, and ensure high-quality service delivery
• Co-create methodologies, develop tools, and support the team through knowledge sharing