Senior Associate Penetration Testing

Urbane is seeking the most talented, driven, and intelligent professionals in offensive and defensive security to join our Security Services teams and help secure the largest and most interesting organizations, platforms, and products in the world. We assess real‑life risks to diverse technical environments by identifying security weaknesses, actively exploiting findings, and determining additional impact through post‑exploitation. The role includes black‑box network testing, insider threat assessments, credentialed application exploitation, testing the effectiveness of human and physical controls, and occasionally providing defensive guidance or assisting compliance teams. Key Character Traits Creative, out‑of‑the‑box thinker who can leverage diverse knowledge to create tailored tests and solutions. Curious by nature with an appetite to find weaknesses in design and implementation. Prefers building, contributing, and leading over following instructions. Willing to put in extra effort to build tools that improve processes. Values long‑term client relationships and provides sustainable remediation suggestions. Passionate about technology and enjoys personal tech projects. Stays current with the latest technologies, attacks, and hardening strategies. Driven, continuously improves, and delivers. Open to domestic/international travel (currently Highly organized and detail‑oriented, able to prioritize multiple projects. Strong ethical compass and understands ethics in security. Comfortable communicating with both technical and non‑technical audiences. Respects corporate culture but maintains an independent identity. Currently a US citizen or other permanent US resident. Required Experience & Knowledge 3+ years of experience in penetration testing (consulting or internal). Experience in one or more of the following: external network, internal network, wireless, web application, mobile application, social engineering, non‑destructive physical security testing. Strong technical knowledge of mixed‑technology environments: operating systems, network hardware, application languages, administration tools, authentication mechanisms, and cloud platforms. Extensive use of open‑source penetration testing tools and frameworks (Metasploit, Burp, Nmap, etc.). Ability to develop or modify tools in scripting languages (Ruby, Python, Perl, Java). Solid understanding of computer fundamentals down to protocol stacks. Strong written and verbal communication skills. Preferred (but not required) Active in industry groups or conferences (OWASP, DEFCON, ShmooCon, etc.). College degree or equivalent experience. Security certifications (OSCP, OSWP, GPEN, GWAPT, CPTE, CISSP) or willingness to obtain them. Experience in creating custom exploitation tools or payloads. Independent research or tool development. Located in the Chicago area or open to relocation across the US. Prefers the terminology “information security” or “computer security” over “cyber”. About Urbane Founded in 2009, Urbane is an information security firm focused on elevating the level of security and compliance through uniquely tailored, highly‑technical engagements. We serve a wide array of customers from Fortune enterprises to start‑ups. Benefits Competitive salary. Standard benefits package: medical, dental, vision, paid vacation, 401(k), and reimbursable internet/phone/gym plans. Training and professional development stipends (including conferences). Annual team meetings and occasional team events. Exotic travel opportunities. Challenging, meaningful work with opportunities for intellectual growth. #J-18808-Ljbffr Urbane Security