[Hiring] Penetration Tester / Ethical Hacker @Iconma Portal

Role Description

Client Technology, Inc, Information Security Office seeks a Penetration Tester / Ethical Hacker for their Exposure Management Team. The Penetration Tester is responsible for strengthening Client cyber security posture through manual and automated penetration testing, red team engagements, and offensive security assessments. The scope of the position's responsibilities includes:

• Planning and executing tests across applications, networks, and infrastructure to uncover exploitable vulnerabilities and attack paths.
• Reducing the attack surface by identifying, prioritizing, and partnering with various departments for timely vulnerability remediation.
• Performing manual exploitation and validation of vulnerabilities to eliminate false positives and uncover logic flaws automated tools miss.
• Designing, configuring, and running automated vulnerability scanning pipelines.
• Building and deploying AI-agent-driven testing workflows.
• Analyzing the environment from a threat actor's perspective.
• Identifying security risks, threats, misconfigurations, and vulnerabilities.
• Performing red team engagements simulating advanced persistent threat (APT) tactics.
• Tracking and documenting testing activities and providing updates to leadership.
• Reporting gaps in a meaningful way that addresses business risk.

Qualifications

• 3+ years of direct experience performing penetration testing / red teaming in an active corporate environment.
• Experience consuming and analyzing Cyber Threat Intelligence for actionable takeaways.
• Experience explaining testing objectives and findings in plain English.
• Minimum 3 years of experience in the practice of penetration testing / ethical hacking.

Requirements

• Demonstrated experience planning and executing penetration test and red team engagements.
• Comfort operating in terminal environments.
• Ability to analyze an architectural document and strategically probe accordingly.
• Working knowledge of common networking protocols (HTTP, DNS, SMB, etc.).
• Familiar with operation of both Windows and Linux based systems.
• Proficient with cross platform scripting languages such as Python or Golang, also PowerShell.
• Experience working with various technologies and platforms such as AWS, Azure, O365, GCP, containers, etc.
• Proficiency with industry-standard testing tools such as Burp Suite, Metasploit, Nmap, Wireshark, Cobalt Strike, BloodHound, and the Kali Linux toolset.
• Practical experience integrating AI/LLM-based agents into security testing workflows.
• Understanding of current cyber threat landscape and tactics used by adversaries.

Benefits

• Health Benefits.
• Referral Program.
• Excellent growth and advancement opportunities.