[Hiring] Cybersecurity Penetration Tester @SOCBOX, Inc.

Role Description

As Penetration Tester at FIT Cybersecurity, your responsibilities would include testing client’s internal and external networks, web applications, and APIs. The Penetration Tester will provide debriefing to both client technical and executive teams on security assessment findings.

• Identify and disclose vulnerabilities and vulnerable components of a client infrastructure.
• Execute webapp and network pen tests independently, providing clients the remediation guidance for all significant identified vulnerabilities.
• Contribute to Assessment Research and Development initiatives (identifying new 0-day vulnerabilities, improving attack methodologies, improving penetration test tooling, etc.).
• Develop and adhere to process documentation in support of cyber penetration testing execution.

• Identify emerging security risks and collaborate with internal service teams and clients to develop appropriate mitigation strategies.
• Configure and support various operating systems (Windows, Linux, UNIX, macOS), virtualization platforms (VMware, Xen, Hyper-V), and cloud environments (AWS, Azure) used in penetration testing.
• Effectively assess and communicate security risks, business impact, and appropriate levels of urgency to stakeholders.
• Participate in client engagement kickoff meetings, technical debriefings, and executive presentations.
• Collaborate effectively with internal teams, external organizations, and client stakeholders throughout security assessment engagements.
• Share knowledge, provide technical guidance, and train team members on penetration testing methodologies, tools, and best practices.
• Support continuous improvement initiatives to enhance the effectiveness and efficiency of penetration testing services.
• Perform other duties as assigned.

Qualifications

• Excellent organizational, verbal, and written communication skills, including the ability to explain complex technical findings to nontechnical audiences.
• Strong understanding of cybersecurity fundamentals, common vulnerabilities, attack methodologies, and remediation strategies.
• Demonstrated experience in vulnerability discovery, security engineering, application security, and penetration testing.
• Intermediate to advanced proficiency with virtualization and containerization technologies.
• Strong analytical, critical-thinking, and problem-solving skills.
• Ability to independently manage multiple client engagements, prioritize competing deadlines, and deliver high-quality results.
• Strong attention to detail, particularly in documenting vulnerabilities, supporting evidence, and remediation recommendations.
• Ability to work collaboratively in a remote, client-focused consulting environment.

Requirements

• Required Certification: GIAC Penetration Tester (GPEN).
• Preferred Certification: Offensive Security Certified Professional (OSCP). Additional advanced cybersecurity certifications, including OSCE, GWAPT, GXPN, or CISSP, are a plus.
• Required Work Sample: Candidates must be able to provide a sanitized sample penetration testing report demonstrating their ability to document vulnerabilities, assess risk, present technical findings, and communicate actionable remediation recommendations. All samples must exclude confidential client information.
• Strong foundational knowledge and hands-on experience in web application and network penetration testing. Experience with mobile applications, APIs, and cloud environments is a plus.
• Previous experience in cybersecurity consulting, penetration testing, or offensive security assessments.
• Solid understanding of common web application vulnerabilities, exploitation techniques, and remediation options.
• Knowledge of IT infrastructure, security engineering, system and network security, authentication protocols, and applied cryptography.
• Experience with configuration management, system maintenance, integration testing, penetration testing, and vulnerability analysis.
• Knowledge of system architectures and networking technologies, including client/server environments, web hosting, directory services, firewalls, WAN, MAN, LAN, switches, and routers.
• Proficiency with macOS, Linux, and Windows operating systems.
• Experience preparing professional penetration testing reports and presenting assessment results to clients.
• Familiarity with industry-standard penetration testing methodologies, frameworks, and tools.

Benefits

• Health, Dental & Vision Insurance (premiums paid up to 99% for employee coverage)
• Options include, PPO, HDHP, HMO and ACO
• Multiple carrier options
• FSA (dependent and medical), HSA options (for qualified plans) and supplemental insurance options
• $10,000 employer-paid Life Insurance & AD&D (employees have the option to buy up)
• Paid holidays
• Paid time off
• Paid sick leave
• Flexible “hybrid” work environment
• Retirement plan (401K)
• Professional training & development opportunities

Work Environment and Travel

• Remote position with occasional travel required for client engagements, meetings, or other business needs.
• Must be able to work independently and collaborate effectively with geographically distributed teams.
• Occasional testing outside of regular business hours, including evenings and weekends, may be required based on client needs and engagement requirements.