Penetration Tester

Job Description

Job Description

Title: Penetration Tester

Department: Cybersecurity/Offensive Security Consulting

Location:  Urbandale, IA

Job Summary

The Penetration Tester is a mid-level offensive security consulting position within Tenax Solutions. This role is responsible for performing penetration testing and other offensive security assessments across internal and external networks, web applications, cloud environments, wireless networks, AI systems, and other technical environments as assigned.

Responsibilities

Penetration Testing & Security Assessments

• AI Penetration Tests and Configuration Reviews
• Cloud Penetration Tests and Configuration Reviews
• External Network Penetration Tests and Vulnerability Assessments
• Internal Network Penetration Tests and Vulnerability Assessments
• Physical Penetration Tests
• Social Engineering Assessments
• Web Application Penetration Tests
• Wireless Penetration Tests and Vulnerability Assessments
• Other offensive security services offered by Tenax Solutions

Client Communication

• Leading kickoff calls, technical discussions, and report review meetings.
• Clearly explaining vulnerabilities, attack paths, remediation recommendations, and security risks.
• Providing timely updates regarding testing progress, blockers, and critical findings.

Reporting & Documentation

• Writing clear and comprehensive penetration testing and vulnerability assessment reports.
• Documenting findings with technical details, supporting evidence, and remediation recommendations.
• Participating in internal quality assurance reviews.

Required Skills & Experience

• Associate’s degree in Information Technology, Cybersecurity, or another relevant field.
• 2–5 years of experience in Information Technology, Cybersecurity, or a related field.
• Solid understanding of networking, operating systems, web technologies, and cybersecurity concepts.
• Knowledge of common attack techniques, exploitation methods, and vulnerabilities.
• Ability to use offensive security tools safely and effectively.
• Strong written and verbal communication skills.
• Strong documentation, organization, and time-management skills.
• Ability to work independently while following approved scope and methodology.
• Ability to collaborate effectively with consultants, project managers, and client stakeholders.
• Demonstrated professional judgment when handling sensitive systems, data, and client communications.

Preferred Skills & Experience

• Experience conducting penetration tests of internal and external networks, Active Directory, web applications, and cloud environments.
• Familiarity with common penetration testing methodologies and security frameworks, including OWASP, MITRE ATT&CK, NIST, and PTES.
• Experience using common offensive security tools such as Burp Suite, Nmap, BloodHound, Impacket, Metasploit, and vulnerability scanners.
• Relevant industry certifications such as Security+, PenTest+, PNPT, CPTS, CEH, or OSCP.
• Experience identifying vulnerabilities, developing attack paths, and providing actionable remediation recommendations.

Working Conditions & Expectations

• Consulting work may require occasional non-standard hours based on client needs, testing windows, or emergency requests.
• Some engagements may require remote work, virtual meetings, or travel.
• The consultant must be able to respond professionally to time-sensitive client needs.
• The consultant must be comfortable working in dynamic client environments with changing priorities and timelines.
• All work must be performed in accordance with company policies, client authorization, and applicable laws

Why Tenax Solutions? 

Tenax Solutions is an information security and compliance company dedicated to helping businesses protect their data and navigate today’s evolving cybersecurity landscape. We provide personalized cybersecurity and compliance solutions tailored to each client’s unique needs, helping organizations strengthen their security, maintain compliance, and maximize their return on investment.

At Tenax Solutions, we strive to be a trusted long-term partner for our clients, providing the expertise, guidance, and support they need to stay secure in an increasingly connected world.