Best suited to experienced penetration testers with a focus on internal network and cloud-based SaaS environments working in a remote setting.
Derived from job-description analysis by Serendipath's career intelligence engine.
Original posting from A-LIGN External via Greenhouse
About the Role
The Internal Penetration Tester works to execute offensive security activities for Pathfynder by A-LIGN. In this role, you will be responsible for the delivery of internal network and cloud-based SaaS penetration testing engagements. As the Internal Penetration Tester, you will provide exceptional technical and client-focused testing strategies to help support the continued growth of our fast-paced company. A-LIGN will depend on you as the Internal Penetration Tester to independently identify and validate real-world security risks, manually exploit vulnerabilities, document findings, and communicate practical remediation guidance to clients.
Reports to
Director, Internal Offensive Operations
Pay Classification
Full-Time, Exempt
Responsibilities
Execute internal network and cloud-based SaaS penetration testing engagements
Identify, validate, and manually exploit vulnerabilities using public exploits, custom-developed exploits, or a combination of techniques
Evaluate findings in context, explore realistic attack paths, and accurately assess business and technical risk
Deliver clear, accurate, client-ready reports that explain findings, evidence, and actionable remediation guidance
Communicate technical issues, testing results, and remediation recommendations to client stakeholders
Maintain project quality and timelines while executing assigned engagements with minimal oversight
Collaborate with the offensive security team to evaluate industry tools, improve delivery methods, and share technical knowledge
Mentor team members and contribute to the continued development of team capabilities
Minimum Qualifications
EDUCATION
Degree in cybersecurity, computer information systems, related discipline or equivalent professional
EXPERIENCE
5+ years of hands-on offensive security experience, including at least 3 years focused on internal network, Active Directory, red team, or purple team penetration testing
Experience with network and system exploitation across enterprise environments
Knowledge of penetration testing methodologies and current offensive security practices
Experience applying current tactics, techniques, and procedures related to EDR bypass, lateral movement, and privilege escalation
Preferred red team or purple team penetration testing experience
Preferred wireless penetration testing experience
Preferred consulting or client-facing security delivery experience
CERTIFICATIONS
Preferred OSCP, CEH, or OSEP certification.
Preferred additional advanced certifications relevant to internal network, Active Directory, red team, or cloud security testing
SKILLS
Passion for information security and identifying exploitable vulnerabilities before threat actors can take advantage of them.
Ability to discover and exploit complex vulnerabilities while maintaining a disciplined and repeatable approach to testing.
Knowledge of Active Directory attack paths, network exploitation, lateral movement, privilege escalation, and defence evasion techniques.
Proficiency with scripting languages such as Python, Bash, JavaScript, PowerShell, or SQL.
Proficiency with commonly used offensive security tools such as Nmap, BloodHound, the Impacket suite, Metasploit, Wireshark, and Nessus.
Knowledge of multiple penetration testing concentrations and the ability to select appropriate methodologies and tools.
Ability to write clear, concise, client-ready reports with accurate findings and actionable remediation guidance.
Excellent verbal and written communication skills, with the ability to explain technical risks to technical and non-technical audiences.
Ability to work independently and collaboratively in a fast-paced, remote environment while meeting deadlines.
Continuous desire to grow technical capabilities, improve delivery efficiency, and share knowledge with team members and clients.
Cloud architecture knowledge across AWS, Microsoft Azure, or Google Cloud Platform is preferred.
Benefits
Healthcare, Dental, and Vision Benefits
Employer Paid Life Insurance and Disability Insurance
EAP - Employee Assistance Program
Pet Insurance
401(k) Plan with Employer Matching
Competitive Bonus Structure
Technology Allowance
Certification Reimbursement
Personalised Career Coaching
Generous Paid Time Off
Paid Office Closure December 25-January 1
Vacation Bonus
Summer Hours
About Pathfynder by A-LIGN
Pathfynder by A-LIGN is a technology-enabled cybersecurity company providing offensive and defensive cybersecurity services under A-LIGN, a security and compliance partner trusted by more than 2,400 global organisations to help mitigate cybersecurity risks. We work with organisations ranging from small businesses to global enterprises, with services spanning SOC, Penetration Testing, PCI DSS, HITRUST, ISO, and privacy compliance. Our proprietary compliance management platform is transforming the compliance experience by enabling an anytime, anywhere approach to audits. To learn more, visit A-LIGN.com.
Come Work for A-LIGN!
Apply online today at A-LIGN.com and learn about life at A-LIGN by following us on LinkedIn.
A-LIGN is an Equal Opportunity Employer. Minorities, women, disabled individuals, and veterans are encouraged to apply.