Penetration Test Infra

Senior Infrastructure Penetration Tester / Infrastructure Security Consultant – Job Description

Job Title

Senior Infrastructure Penetration Tester

Experience

5-10 Years (Senior) / 8-12 Years (Lead)

Department

Cyber Security / Offensive Security / Red Team

Role Summary

We are seeking an experienced Senior Infrastructure Penetration Tester to perform security assessments, vulnerability exploitation, red team exercises, and infrastructure security testing across enterprise on-premises, cloud, network, server, virtualization, and Active Directory environments.

The candidate should possess strong expertise in Network Penetration Testing, Active Directory Security, Windows/Linux Security, Cloud Security, Red Team Operations, Vulnerability Assessment, Privilege Escalation, and Security Remediation Consulting.

Key Responsibilities

Infrastructure Penetration Testing

• Perform internal and external network penetration testing.
• Conduct vulnerability assessments and security audits.
• Identify security weaknesses across servers, networks, endpoints, and infrastructure components.
• Validate vulnerabilities through controlled exploitation.
• Perform security assessments for hybrid cloud environments.

Active Directory Security Testing

• Conduct Active Directory penetration testing.
• Identify privilege escalation paths and attack chains.
• Assess Kerberos, NTLM, LDAP, Group Policies, and Authentication Security.
• Evaluate Tier-0 assets and privileged access security.
• Perform lateral movement assessments.

Tools

• BloodHound
• PingCastle
• Mimikatz
• Impacket
• Rubeus
• PowerView

Network Penetration Testing

• Assess routers, switches, firewalls, and network devices.
• Conduct internal and external attack simulations.
• Perform network enumeration and reconnaissance.
• Identify misconfigurations and insecure protocols.
• Assess firewall and segmentation controls.

Technologies

• Cisco
• Palo Alto
• Fortinet
• Check Point
• F5
• Load Balancers
• VPN Technologies

Cloud Security Assessment

• Perform security assessments of Azure and AWS environments.
• Validate IAM security configurations.
• Assess cloud networking and security controls.
• Review security posture and compliance gaps.
• Conduct privilege escalation testing in cloud environments.

Platforms

• Microsoft Azure
• AWS
• Microsoft Entra ID
• AWS IAM
• Defender for Cloud

Operating System Security Testing

Windows Security

• Windows Server Security Assessment
• Active Directory Security Review
• Group Policy Review
• Privileged Access Assessment
• PowerShell Security

Linux Security

• Linux hardening validation
• Privilege escalation testing
• Sudo configuration reviews
• SSH security reviews

Vulnerability Management

• Conduct authenticated and unauthenticated scans.
• Validate vulnerabilities identified by scanning tools.
• Perform risk prioritization and remediation recommendations.
• Assist infrastructure teams in vulnerability closure.

Tools

• Nessus
• Qualys
• Rapid7 InsightVM
• OpenVAS
• Nexpose

Red Team Activities

• Execute red team simulations.
• Emulate real-world threat actors.
• Test detection and response capabilities.
• Assess SOC monitoring effectiveness.
• Validate EDR/XDR security controls.

Security Platforms Exposure

• Microsoft Defender for Endpoint
• CrowdStrike Falcon
• SentinelOne
• Microsoft Sentinel
• Splunk

Reporting & Remediation

• Develop executive and technical assessment reports.
• Present findings to security leadership and infrastructure teams.
• Provide actionable remediation recommendations.
• Support security improvement initiatives.
• Conduct security awareness sessions for technical teams.

Required Technical Skills

Infrastructure & Network Security

• TCP/IP
• Routing & Switching
• Firewalls
• VPN Technologies
• IDS/IPS
• Network Segmentation
• DNS, DHCP

Security Testing Tools

• Burp Suite Professional
• Nmap
• Metasploit
• Nessus
• Qualys
• Wireshark
• BloodHound
• CrackMapExec
• Responder
• Impacket

Operating Systems

• Windows Server
• Linux Administration
• Active Directory
• VMware
• Hyper-V
• Citrix

Scripting

• PowerShell
• Python
• Bash
• Automation Scripting

Cloud Security

• Azure Security
• AWS Security
• IAM Security
• Entra ID
• Cloud Networking

Qualifications

• Bachelor's Degree in Cyber Security, Computer Science, Information Technology, or related field.
• 5-10 years of experience in Penetration Testing, Red Teaming, Security Assessments, or Cyber Security Engineering.
• Strong understanding of attack methodologies and security controls.
• Experience working with enterprise infrastructure environments.

Preferred Certifications

Offensive Security

• OSCP (Highly Preferred)
• OSCE
• OSEP
• CRTO (Certified Red Team Operator)
• CRTP (Certified Red Team Professional)

Security Certifications

• CISSP
• CEH
• GPEN
• GWAPT
• GCIH
• CompTIA Security+

Cloud Certifications

• AZ-500
• AWS Security Specialty

Key Competencies

• Infrastructure Penetration Testing
• Active Directory Security
• Red Team Operations
• Network Security Assessments
• Vulnerability Management
• Exploitation Techniques
• Privilege Escalation
• Cloud Security Testing
• Security Architecture Review
• Technical Reporting
• Client & Stakeholder Management

Ideal Candidate Profile (Senior Level)

A security professional with 5-10 years of experience in Infrastructure Penetration Testing, Active Directory Security, Windows/Linux Administration, Network Security, VMware/Citrix, Azure/AWS Security, Vulnerability Management, Red Teaming, and Security Consulting. The candidate should be capable of independently leading enterprise security assessments, simulating advanced attack scenarios, validating security controls, and providing strategic remediation guidance to global clients.

Senior Infrastructure Penetration Tester / Infrastructure Security Consultant – Job Description

Job Title

Senior Infrastructure Penetration Tester

Experience

5-10 Years (Senior) / 8-12 Years (Lead)

Department

Cyber Security / Offensive Security / Red Team

Role Summary

We are seeking an experienced Senior Infrastructure Penetration Tester to perform security assessments, vulnerability exploitation, red team exercises, and infrastructure security testing across enterprise on-premises, cloud, network, server, virtualization, and Active Directory environments.

The candidate should possess strong expertise in Network Penetration Testing, Active Directory Security, Windows/Linux Security, Cloud Security, Red Team Operations, Vulnerability Assessment, Privilege Escalation, and Security Remediation Consulting.

Key Responsibilities

Infrastructure Penetration Testing

• Perform internal and external network penetration testing.
• Conduct vulnerability assessments and security audits.
• Identify security weaknesses across servers, networks, endpoints, and infrastructure components.
• Validate vulnerabilities through controlled exploitation.
• Perform security assessments for hybrid cloud environments.

Active Directory Security Testing

• Conduct Active Directory penetration testing.
• Identify privilege escalation paths and attack chains.
• Assess Kerberos, NTLM, LDAP, Group Policies, and Authentication Security.
• Evaluate Tier-0 assets and privileged access security.
• Perform lateral movement assessments.

Tools

• BloodHound
• PingCastle
• Mimikatz
• Impacket
• Rubeus
• PowerView

Network Penetration Testing

• Assess routers, switches, firewalls, and network devices.
• Conduct internal and external attack simulations.
• Perform network enumeration and reconnaissance.
• Identify misconfigurations and insecure protocols.
• Assess firewall and segmentation controls.

Technologies

• Cisco
• Palo Alto
• Fortinet
• Check Point
• F5
• Load Balancers
• VPN Technologies

Cloud Security Assessment

• Perform security assessments of Azure and AWS environments.
• Validate IAM security configurations.
• Assess cloud networking and security controls.
• Review security posture and compliance gaps.
• Conduct privilege escalation testing in cloud environments.

Platforms

• Microsoft Azure
• AWS
• Microsoft Entra ID
• AWS IAM
• Defender for Cloud

Operating System Security Testing

Windows Security

• Windows Server Security Assessment
• Active Directory Security Review
• Group Policy Review
• Privileged Access Assessment
• PowerShell Security

Linux Security

• Linux hardening validation
• Privilege escalation testing
• Sudo configuration reviews
• SSH security reviews

Vulnerability Management

• Conduct authenticated and unauthenticated scans.
• Validate vulnerabilities identified by scanning tools.
• Perform risk prioritization and remediation recommendations.
• Assist infrastructure teams in vulnerability closure.

Tools

• Nessus
• Qualys
• Rapid7 InsightVM
• OpenVAS
• Nexpose

Red Team Activities

• Execute red team simulations.
• Emulate real-world threat actors.
• Test detection and response capabilities.
• Assess SOC monitoring effectiveness.
• Validate EDR/XDR security controls.

Security Platforms Exposure

• Microsoft Defender for Endpoint
• CrowdStrike Falcon
• SentinelOne
• Microsoft Sentinel
• Splunk

Reporting & Remediation

• Develop executive and technical assessment reports.
• Present findings to security leadership and infrastructure teams.
• Provide actionable remediation recommendations.
• Support security improvement initiatives.
• Conduct security awareness sessions for technical teams.

Required Technical Skills

Infrastructure & Network Security

• TCP/IP
• Routing & Switching
• Firewalls
• VPN Technologies
• IDS/IPS
• Network Segmentation
• DNS, DHCP

Security Testing Tools

• Burp Suite Professional
• Nmap
• Metasploit
• Nessus
• Qualys
• Wireshark
• BloodHound
• CrackMapExec
• Responder
• Impacket

Operating Systems

• Windows Server
• Linux Administration
• Active Directory
• VMware
• Hyper-V
• Citrix

Scripting

• PowerShell
• Python
• Bash
• Automation Scripting

Cloud Security

• Azure Security
• AWS Security
• IAM Security
• Entra ID
• Cloud Networking

Qualifications

• Bachelor's Degree in Cyber Security, Computer Science, Information Technology, or related field.
• 5-10 years of experience in Penetration Testing, Red Teaming, Security Assessments, or Cyber Security Engineering.
• Strong understanding of attack methodologies and security controls.
• Experience working with enterprise infrastructure environments.

Preferred Certifications

Offensive Security

• OSCP (Highly Preferred)
• OSCE
• OSEP
• CRTO (Certified Red Team Operator)
• CRTP (Certified Red Team Professional)

Security Certifications

• CISSP
• CEH
• GPEN
• GWAPT
• GCIH
• CompTIA Security+

Cloud Certifications

• AZ-500
• AWS Security Specialty

Key Competencies

• Infrastructure Penetration Testing
• Active Directory Security
• Red Team Operations
• Network Security Assessments
• Vulnerability Management
• Exploitation Techniques
• Privilege Escalation
• Cloud Security Testing
• Security Architecture Review
• Technical Reporting
• Client & Stakeholder Management

Ideal Candidate Profile (Senior Level)

A security professional with 5-10 years of experience in Infrastructure Penetration Testing, Active Directory Security, Windows/Linux Administration, Network Security, VMware/Citrix, Azure/AWS Security, Vulnerability Management, Red Teaming, and Security Consulting. The candidate should be capable of independently leading enterprise security assessments, simulating advanced attack scenarios, validating security controls, and providing strategic remediation guidance to global clients.

Senior Infrastructure Penetration Tester / Infrastructure Security Consultant – Job Description

Job Title

Senior Infrastructure Penetration Tester

Experience

5-10 Years (Senior) / 8-12 Years (Lead)

Department

Cyber Security / Offensive Security / Red Team

Role Summary

We are seeking an experienced Senior Infrastructure Penetration Tester to perform security assessments, vulnerability exploitation, red team exercises, and infrastructure security testing across enterprise on-premises, cloud, network, server, virtualization, and Active Directory environments.

The candidate should possess strong expertise in Network Penetration Testing, Active Directory Security, Windows/Linux Security, Cloud Security, Red Team Operations, Vulnerability Assessment, Privilege Escalation, and Security Remediation Consulting.

Key Responsibilities

Infrastructure Penetration Testing

• Perform internal and external network penetration testing.
• Conduct vulnerability assessments and security audits.
• Identify security weaknesses across servers, networks, endpoints, and infrastructure components.
• Validate vulnerabilities through controlled exploitation.
• Perform security assessments for hybrid cloud environments.

Active Directory Security Testing

• Conduct Active Directory penetration testing.
• Identify privilege escalation paths and attack chains.
• Assess Kerberos, NTLM, LDAP, Group Policies, and Authentication Security.
• Evaluate Tier-0 assets and privileged access security.
• Perform lateral movement assessments.

Tools

• BloodHound
• PingCastle
• Mimikatz
• Impacket
• Rubeus
• PowerView

Network Penetration Testing

• Assess routers, switches, firewalls, and network devices.
• Conduct internal and external attack simulations.
• Perform network enumeration and reconnaissance.
• Identify misconfigurations and insecure protocols.
• Assess firewall and segmentation controls.

Technologies

• Cisco
• Palo Alto
• Fortinet
• Check Point
• F5
• Load Balancers
• VPN Technologies

Cloud Security Assessment

• Perform security assessments of Azure and AWS environments.
• Validate IAM security configurations.
• Assess cloud networking and security controls.
• Review security posture and compliance gaps.
• Conduct privilege escalation testing in cloud environments.

Platforms

• Microsoft Azure
• AWS
• Microsoft Entra ID
• AWS IAM
• Defender for Cloud

Operating System Security Testing

Windows Security

• Windows Server Security Assessment
• Active Directory Security Review
• Group Policy Review
• Privileged Access Assessment
• PowerShell Security

Linux Security

• Linux hardening validation
• Privilege escalation testing
• Sudo configuration reviews
• SSH security reviews

Vulnerability Management

• Conduct authenticated and unauthenticated scans.
• Validate vulnerabilities identified by scanning tools.
• Perform risk prioritization and remediation recommendations.
• Assist infrastructure teams in vulnerability closure.

Tools

• Nessus
• Qualys
• Rapid7 InsightVM
• OpenVAS
• Nexpose

Red Team Activities

• Execute red team simulations.
• Emulate real-world threat actors.
• Test detection and response capabilities.
• Assess SOC monitoring effectiveness.
• Validate EDR/XDR security controls.

Security Platforms Exposure

• Microsoft Defender for Endpoint
• CrowdStrike Falcon
• SentinelOne
• Microsoft Sentinel
• Splunk

Reporting & Remediation

• Develop executive and technical assessment reports.
• Present findings to security leadership and infrastructure teams.
• Provide actionable remediation recommendations.
• Support security improvement initiatives.
• Conduct security awareness sessions for technical teams.

Required Technical Skills

Infrastructure & Network Security

• TCP/IP
• Routing & Switching
• Firewalls
• VPN Technologies
• IDS/IPS
• Network Segmentation
• DNS, DHCP

Security Testing Tools

• Burp Suite Professional
• Nmap
• Metasploit
• Nessus
• Qualys
• Wireshark
• BloodHound
• CrackMapExec
• Responder
• Impacket

Operating Systems

• Windows Server
• Linux Administration
• Active Directory
• VMware
• Hyper-V
• Citrix

Scripting

• PowerShell
• Python
• Bash
• Automation Scripting

Cloud Security

• Azure Security
• AWS Security
• IAM Security
• Entra ID
• Cloud Networking

Qualifications

• Bachelor's Degree in Cyber Security, Computer Science, Information Technology, or related field.
• 5-10 years of experience in Penetration Testing, Red Teaming, Security Assessments, or Cyber Security Engineering.
• Strong understanding of attack methodologies and security controls.
• Experience working with enterprise infrastructure environments.

Preferred Certifications

Offensive Security

• OSCP (Highly Preferred)
• OSCE
• OSEP
• CRTO (Certified Red Team Operator)
• CRTP (Certified Red Team Professional)

Security Certifications

• CISSP
• CEH
• GPEN
• GWAPT
• GCIH
• CompTIA Security+

Cloud Certifications

• AZ-500
• AWS Security Specialty

Key Competencies

• Infrastructure Penetration Testing
• Active Directory Security
• Red Team Operations
• Network Security Assessments
• Vulnerability Management
• Exploitation Techniques
• Privilege Escalation
• Cloud Security Testing
• Security Architecture Review
• Technical Reporting
• Client & Stakeholder Management

Ideal Candidate Profile (Senior Level)

A security professional with 5-10 years of experience in Infrastructure Penetration Testing, Active Directory Security, Windows/Linux Administration, Network Security, VMware/Citrix, Azure/AWS Security, Vulnerability Management, Red Teaming, and Security Consulting. The candidate should be capable of independently leading enterprise security assessments, simulating advanced attack scenarios, validating security controls, and providing strategic remediation guidance to global clients.