Penetration Tester – Remote (Full‑time)

About the role

We are seeking a highly skilled and motivated Penetration Tester to join our Cyber Security team. The role focuses on conducting advanced penetration testing engagements across enterprise environments, with a particular emphasis on Active Directory security assessments.

Key responsibilities

• Conduct comprehensive penetration testing engagements against enterprise infrastructure, networks, systems, and applications.
• Perform manual and automated security assessments to identify vulnerabilities, weaknesses, and potential attack vectors.
• Assess and exploit Active Directory environments, identifying misconfigurations, privilege‑escalation paths, lateral‑movement opportunities and credential‑theft risks.
• Execute network and system exploitation activities to validate security weaknesses and evaluate their impact.
• Develop detailed technical reports with attack paths, findings, business impact, proof‑of‑concept evidence and remediation recommendations.
• Present findings to technical and non‑technical stakeholders and support remediation efforts.

Required profile

• Proven experience conducting penetration tests across enterprise networks and infrastructure.
• Strong knowledge of Windows environments and Active Directory security.
• Excellent analytical, troubleshooting and problem‑solving abilities.
• Strong technical documentation and report‑writing skills.

Required skills

• BloodHound
• Mimikatz
• CrackMapExec
• Impacket
• Nmap
• Burp Suite
• Metasploit
• Responder
• Knowledge of network protocols and architecture
• Windows Server administration
• Kerberos and NTLM authentication mechanisms
• Privilege‑escalation and lateral‑movement techniques
• Familiarity with OWASP, NIST and PTES methodologies