[Hiring] Penetration Tester @Packetlabs Ltd.

Role Description

The Ethical Hacker – Infrastructure & Red Team is responsible for planning, executing, and reporting on infrastructure penetration testing, cloud security assessments, Active Directory security assessments, and adversary simulation engagements. The role evaluates the effectiveness of client security controls by identifying, validating, and demonstrating exploitable security vulnerabilities across enterprise infrastructure using industry-recognized offensive security methodologies.

Working independently and collaboratively with other security consultants, the Ethical Hacker performs offensive security assessments across on-premises, hybrid, and cloud environments while contributing to red team operations, purple team exercises, and advanced security testing engagements. The role provides technical guidance to clients through detailed reporting and presentations while contributing to the continuous improvement of Packetlabs' offensive security methodologies, tooling, and service offerings.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related discipline; equivalent practical experience will be considered.
• Minimum of 3 years of professional experience performing infrastructure penetration testing, red teaming, adversary simulation, or offensive security consulting.
• Demonstrated experience conducting penetration testing across enterprise infrastructure, including Windows, Linux, Active Directory, Microsoft Entra ID, cloud platforms, and enterprise networking.
• Experience performing internal and external network penetration testing, privilege escalation, Active Directory security assessments, and lateral movement testing.
• Experience assessing cloud environments, including AWS, Microsoft Azure, or Google Cloud Platform.
• Strong understanding of enterprise networking, authentication technologies, identity management, cloud security, and offensive security methodologies.
• Experience using industry-standard offensive security frameworks, tools, and tradecraft.
• Excellent technical writing, presentation, and communication skills, with the ability to communicate findings to both technical and executive stakeholders.
• Industry certifications such as OSCP, OSEP, CRTO, CRTE, CARTP, CARTA, CREST CRT, CREST CCT, PNPT, GPEN, GXPN, or equivalent are considered an asset. OSCP or equivalent demonstrated technical capability is strongly preferred.
• Experience participating in Red Team, Purple Team, adversary simulation, or threat emulation engagements is considered an asset.
• Customer-first mentality.
• Self-motivated and dependable.
• Humble; egos don't have a place at Packetlabs.

Requirements

• Deliver work that you take pride in; your work is an autograph of your excellence.
• Dig deeper into every finding; doesn't stop until impact is proven.
• Comfortable being uncomfortable; goes towards obstacles, not away from them.
• Always learning; cybersecurity is changing every day.

What you’ll be doing

• Infrastructure Security Assessments:
  • Plan and execute infrastructure penetration testing engagements across on-premises, hybrid, cloud, wireless, and enterprise network environments.
  • Perform internal and external network penetration testing to identify, validate, and exploit security vulnerabilities using manual testing methodologies and industry-standard offensive security tools.
  • Assess enterprise technologies including Active Directory, Microsoft Entra ID (Azure AD), Windows and Linux environments, virtualization platforms, cloud services, and supporting infrastructure.
  • Evaluate cloud environments including AWS, Microsoft Azure, and Google Cloud Platform to identify configuration weaknesses, privilege escalation opportunities, identity risks, and cloud security vulnerabilities.
  • Assess containerized environments, Kubernetes platforms, CI/CD pipelines, and cloud-native technologies where applicable.
• Red Team & Adversary Simulation:
  • Participate in and lead adversary simulation, red team, and objective-based security engagements in accordance with established methodologies and client objectives.
  • Execute offensive security operations across the attack lifecycle, including reconnaissance, initial access, persistence, privilege escalation, credential access, lateral movement, defense evasion, command and control, and objective execution.
  • Support purple team engagements by working collaboratively with defensive teams to validate detections, improve monitoring capabilities, and strengthen defensive controls.
  • Develop and execute attack scenarios that demonstrate realistic business impact while maintaining client system integrity.
• Client Delivery & Reporting:
  • Prepare comprehensive technical reports that clearly communicate vulnerabilities, attack paths, business impact, risk ratings, and remediation recommendations.
  • Present assessment findings to technical teams, executive stakeholders, and client leadership.
  • Provide technical guidance on remediation strategies, security architecture, and defensive improvements.
  • Manage assigned engagements while ensuring delivery quality, timelines, and client expectations are achieved.
• Technical Leadership & Continuous Improvement:
  • Maintain expertise in offensive security methodologies, infrastructure security, cloud technologies, Active Directory security, and emerging attack techniques.
  • Contribute to the development and continuous improvement of testing methodologies, internal tooling, technical documentation, and service offerings.
  • Participate in technical research, automation initiatives, internal training, and knowledge-sharing activities.
  • Collaborate with consulting teams to strengthen technical quality, consistency, and service delivery across the Offensive Security practice.
  • Perform other duties as assigned.

How is success defined

• Successful delivery of infrastructure penetration testing and adversary simulation engagements within established quality, budget, and timeline expectations.
• Accuracy, completeness, and technical quality of client reports and deliverables.
• Demonstrated expertise across enterprise infrastructure, cloud security, Active Directory, and offensive security methodologies.
• Positive client feedback regarding technical expertise, communication, and professionalism.
• Contribution to technical research, methodology development, automation, and knowledge-sharing initiatives.
• Effective collaboration with Delivery Managers, Project Managers, and consulting team members.
• Ongoing professional development through certifications, research, and technical skill advancement.

Benefits

• A leadership team that values substance, quality, and disciplined execution.
• Collaboration with a highly skilled team of security professionals who are passionate about technical excellence and raising the bar.
• Competitive compensation and growth opportunity.
• Paid education and professional development reimbursement to support continued learning, certifications, and technical growth.
• Flexible work environment that empowers employees to do their best work.
• Paid volunteer day each year to give back to your community.
• Paid Birthday day off.
• Paid U.S. public holidays.
• Fully remote within Texas or Florida.