Lead Penetration Tester

Penetration tester

In the game of life, are you stuck on level "Meh"? Why not unlock a legendary career move with us at Infinite Ranges!

Let me spill the tea- Infinite Ranges stands on the cutting edge of deploying, implementing, and custom consulting for tailored Cybersecurity, application modernization and DevSecOps solutions. In under 48 months, we’ve grown to 60+ OEM partners, a staff of over 50, and hundreds of engagements, delivering both people and professional services at-scale.

About the Role:

This specific project is supposed to last about 12-15 weeks and total of 140hrs give or take, fully remote.

Infinite Ranges is seeking an experienced and creative Lead Penetration Tester to join a high-impact engagement. This role is all about offensive security—building, scripting, and executing attack scenarios across a multitude of modern IT environments.

You’ll work hands-on with physical and virtual targets, execute/develop complex attack chains, and lead red team exercises. This is a unique opportunity to apply your offensive toolkit in a high-fidelity environment and leave a lasting impact on cyber readiness.

What You Will Be Doing:

• Develop and execute penetration testing campaigns targeting various infrastructure devices.
• Simulate realistic, multi-phase attack chains including lateral movement, privilege escalation, and multiple specific threat vectors.
• Create custom exploits, payloads, and evasion techniques against emulated and physical assets.
• Work closely with scenario designers to script repeatable red team exercises with measurable impact.
• Conduct threat emulation using TTPs based on real-world APTs and adversaries.
• Define offensive toolkits and infrastructure within the environment.
• Document post-exercise findings, attack graphs, and defensive recommendations.
• Participate in workshops and live events to demo adversarial behavior and tactics.

What We Want To See:

• 5+ years of experience in penetration testing, ethical hacking, or red team operations.
• Strong understanding of the MITRE ATT&CK and IC ATT&CK, and OWASP frameworks.
• Comfort using offensive security tools
• Proficiency with scripting and automation in multiple languages.
• Ability to document complex attacks with clear objectives and results for both technical and non-technical audiences.
• Ability to lead and train Red Teams on attack vectors, attacks ,and APTs

Technologies Used in This Role:

• Offensive Tools: Metasploit, Cobalt Strike, Kali Linux, Impacket, Responder, nmap, BloodHound, Maltego, Burp Suite
• Scripting: Python, Bash, PowerShell, VBA
• Platforms: GCP, AWS, VMware, Azure, Docker, Windows, Mac, Linux
• Vulnerability Analysis: Tenable, Greenbone OpenVAS, Qualys

Bonus Points For:

• Certifications like OSCP, OSEP, GPEN, GXPN, or GRPT
• Experience simulating APT behavior and running attack plans
• Familiarity with threat intelligence integration
• Background in industrial or manufacturing cybersecurity
• Experience mentoring or coaching blue teams
• Familiarity with IC/OT environments (e.g., SCADA, PLCs, HMIs, industrial protocols).

#J-18808-Ljbffr