Penetration Tester

The Penetration Tester is responsible for conducting hands-on security testing to assess vulnerabilities across cloud, network, and application layers. This part-time remote role focuses on ensuring the integrity of evidence, thorough documentation, and reproducible findings to support effective remediation efforts. Responsibilities:

• Perform technical testing and vulnerability verification across cloud, network, and web application layers.
• Collect, label, and preserve evidence following a disciplined chain of custody.
• Document findings with clear reproduction steps, impact analysis, and supporting evidence.
• Support attack-path and detection testing as directed by lead roles.
• Own remediation validation and retesting to confirm that security fixes are effective.

• 3 or more years of hands-on vulnerability assessment and penetration testing experience across cloud, network, and web applications.
• Strong manual verification skills to confirm findings beyond automated scanners.
• Careful evidence handling and clear technical documentation abilities.
• OSCP certification, either active or in progress.

• Scripting skills in Python, Bash, or PowerShell for safe and repeatable testing.
• Certifications such as Security+, CEH, GPEN, or GWAPT.

• Strict adherence to evidence integrity and chain of custody procedures.
• Remote work environment requiring disciplined self-management.

• Part-time contract position with up to 15 hours per week.
• Flexible remote schedule over a 12-month contract period.