Senior Infrastructure Penetration Tester / Infrastructure Security Consultant – Job Description
Job Title: Senior Infrastructure Penetration Tester
Experience: 5-10 Years (Senior) / 8-12 Years (Lead)
Department: Cyber Security / Offensive Security / Red Team

Role Summary

We are seeking an experienced Senior Infrastructure Penetration Tester to perform security assessments, vulnerability exploitation, red team exercises, and infrastructure security testing across enterprise on-premises, cloud, network, server, virtualization, and Active Directory environments.

The candidate should possess strong expertise in Network Penetration Testing, Active Directory Security, Windows/Linux Security, Cloud Security, Red Team Operations, Vulnerability Assessment, Privilege Escalation, and Security Remediation Consulting.

Infrastructure Penetration Testing

Perform internal and external network penetration testing.
Conduct vulnerability assessments and security audits.
Identify security weaknesses across servers, networks, endpoints, and infrastructure components.
Validate vulnerabilities through controlled exploitation.
Perform security assessments for hybrid cloud environments.

Active Directory Security Testing

Conduct Active Directory penetration testing.
Identify privilege escalation paths and attack chains.
Assess Kerberos, NTLM, LDAP, Group Policies, and Authentication Security.
Evaluate Tier-0 assets and privileged access security.
Perform lateral movement assessments.

Network Penetration Testing

Assess routers, switches, firewalls, and network devices.
Conduct internal and external attack simulations.
Perform network enumeration and reconnaissance.
Identify misconfigurations and insecure protocols.
Assess firewall and segmentation controls.

Cloud Security Assessment

Perform security assessments of Azure and AWS environments.
Validate IAM security configurations.
Assess cloud networking and security controls.
Review security posture and compliance gaps.
Conduct privilege escalation testing in cloud environments.

AWS IAM

Defender for Cloud

Linux Security

Linux hardening validation
Privilege escalation testing
Sudo configuration reviews
SSH security reviews

Vulnerability Management

Conduct authenticated and unauthenticated scans.
Validate vulnerabilities identified by scanning tools.
Perform risk prioritization and remediation recommendations.
Assist infrastructure teams in vulnerability closure.

Tools

Red Team Activities

Execute red team simulations.
Emulate real-world threat actors.
Test detection and response capabilities.
Assess SOC monitoring effectiveness.
Validate EDR/XDR security controls.

Security Platforms Exposure

Microsoft Defender for Endpoint

Reporting & Remediation

Develop executive and technical assessment reports.
Present findings to security leadership and infrastructure teams.
Provide actionable remediation recommendations.
Support security improvement initiatives.
Conduct security awareness sessions for technical teams.

VPN Technologies

Nessus

Qualys

BloodHound

Impacket

Cloud Networking

Bachelor's Degree in Cyber Security, Computer Science, Information Technology, or related field.
5-10 years of experience in Penetration Testing, Red Teaming, Security Assessments, or Cyber Security Engineering.
Strong understanding of attack methodologies and security controls.
Experience working with enterprise infrastructure environments.

Infrastructure Penetration Testing

Vulnerability Management

Ideal Candidate Profile (Senior Level)

A security professional with 5-10 years of experience in Infrastructure Penetration Testing, Active Directory Security, Windows/Linux Administration, Network Security, VMware/Citrix, Azure/AWS Security, Vulnerability Management, Red Teaming, and Security Consulting. The candidate should be capable of independently leading enterprise security assessments, simulating advanced attack scenarios, validating security controls, and providing strategic remediation guidance to global clients.

Senior Infrastructure Penetration Tester / Infrastructure Security Consultant – Job Description

Job Title: Senior Infrastructure Penetration Tester

Experience: 5-10 Years (Senior) / 8-12 Years (Lead)

Department: Cyber Security / Offensive Security / Red Team

Role Summary

We are seeking an experienced Senior Infrastructure Penetration Tester to perform security assessments, vulnerability exploitation, red team exercises, and infrastructure security testing across enterprise on-premises, cloud, network, server, virtualization, and Active Directory environments.

The candidate should possess strong expertise in Network Penetration Testing, Active Directory Security, Windows/Linux Security, Cloud Security, Red Team Operations, Vulnerability Assessment, Privilege Escalation, and Security Remediation Consulting.

Key Responsibilities

Infrastructure Penetration Testing

Perform internal and external network penetration testing.
Conduct vulnerability assessments and security audits.
Identify security weaknesses across servers, networks, endpoints, and infrastructure components.
Validate vulnerabilities through controlled exploitation.
Perform security assessments for hybrid cloud environments.

Active Directory Security Testing

Conduct Active Directory penetration testing.
Identify privilege escalation paths and attack chains.
Assess Kerberos, NTLM, LDAP, Group Policies, and Authentication Security.
Evaluate Tier-0 assets and privileged access security.
Perform lateral movement assessments.

Tools

BloodHound

PingCastle

Mimikatz

Impacket

Rubeus

PowerView

Network Penetration Testing

Assess routers, switches, firewalls, and network devices.
Conduct internal and external attack simulations.
Perform network enumeration and reconnaissance.
Identify misconfigurations and insecure protocols.
Assess firewall and segmentation controls.

Technologies

Cisco

Palo Alto

Fortinet

Check Point

F5

Load Balancers

VPN Technologies

Cloud Security Assessment

Perform security assessments of Azure and AWS environments.
Validate IAM security configurations.
Assess cloud networking and security controls.
Review security posture and compliance gaps.
Conduct privilege escalation testing in cloud environments.

Platforms

Microsoft Azure

AWS

Microsoft Entra ID

AWS IAM

Defender for Cloud

Operating System Security Testing

Windows Security

Windows Server Security Assessment

Active Directory Security Review

Group Policy Review

Privileged Access Assessment

PowerShell Security

Linux Security

Linux hardening validation
Privilege escalation testing
Sudo configuration reviews
SSH security reviews

Vulnerability Management

Conduct authenticated and unauthenticated scans.
Validate vulnerabilities identified by scanning tools.
Perform risk prioritization and remediation recommendations.
Assist infrastructure teams in vulnerability closure.

Tools

Nessus

Qualys

Rapid7 InsightVM

OpenVAS

Nexpose

Red Team Activities

Execute red team simulations.
Emulate real-world threat actors.
Test detection and response capabilities.
Assess SOC monitoring effectiveness.
Validate EDR/XDR security controls.

Security Platforms Exposure

Microsoft Defender for Endpoint

CrowdStrike Falcon

SentinelOne

Microsoft Sentinel

Splunk

Reporting & Remediation

Develop executive and technical assessment reports.
Present findings to security leadership and infrastructure teams.
Provide actionable remediation recommendations.
Support security improvement initiatives.
Conduct security awareness sessions for technical teams.

Required Technical Skills

Infrastructure & Network Security

TCP/IP

Routing & Switching

Firewalls

VPN Technologies

IDS/IPS

Network Segmentation

DNS, DHCP

Security Testing Tools

Burp Suite Professional

Nmap

Metasploit

Nessus

Qualys

Wireshark

BloodHound

CrackMapExec

Responder

Impacket

Operating Systems

Windows Server

Linux Administration

Active Directory

VMware

Hyper-V

Citrix

Scripting

PowerShell

Python

Bash

Automation Scripting

Cloud Security

Azure Security

AWS Security

IAM Security

Entra ID

Cloud Networking

Bachelor's Degree in Cyber Security, Computer Science, Information Technology, or related field.
5-10 years of experience in Penetration Testing, Red Teaming, Security Assessments, or Cyber Security Engineering.
Strong understanding of attack methodologies and security controls.
Experience working with enterprise infrastructure environments.

Preferred Certifications

Offensive Security

OSCP (Highly Preferred)

OSCE

OSEP

CRTO (Certified Red Team Operator)

CRTP (Certified Red Team Professional)

Security Certifications

CISSP

CEH

GPEN

GWAPT

GCIH

CompTIA Security+

Cloud Certifications

AZ-500

AWS Security Specialty

Key Competencies

Infrastructure Penetration Testing

Active Directory Security

Red Team Operations

Network Security Assessments

Vulnerability Management

Exploitation Techniques

Privilege Escalation

Cloud Security Testing

Security Architecture Review

Technical Reporting

Client & Stakeholder Management

Ideal Candidate Profile (Senior Level)

A security professional with 5-10 years of experience in Infrastructure Penetration Testing, Active Directory Security, Windows/Linux Administration, Network Security, VMware/Citrix, Azure/AWS Security, Vulnerability Management, Red Teaming, and Security Consulting. The candidate should be capable of independently leading enterprise security assessments, simulating advanced attack scenarios, validating security controls, and providing strategic remediation guidance to global clients.

Senior Infrastructure Penetration Tester / Infrastructure Security Consultant – Job Description

Job Title: Senior Infrastructure Penetration Tester

Experience: 5-10 Years (Senior) / 8-12 Years (Lead)

Department: Cyber Security / Offensive Security / Red Team

Role Summary

We are seeking an experienced Senior Infrastructure Penetration Tester to perform security assessments, vulnerability exploitation, red team exercises, and infrastructure security testing across enterprise on-premises, cloud, network, server, virtualization, and Active Directory environments.

The candidate should possess strong expertise in Network Penetration Testing, Active Directory Security, Windows/Linux Security, Cloud Security, Red Team Operations, Vulnerability Assessment, Privilege Escalation, and Security Remediation Consulting.

Key Responsibilities

Infrastructure Penetration Testing

Perform internal and external network penetration testing.
Conduct vulnerability assessments and security audits.
Identify security weaknesses across servers, networks, endpoints, and infrastructure components.
Validate vulnerabilities through controlled exploitation.
Perform security assessments for hybrid cloud environments.

Active Directory Security Testing

Conduct Active Directory penetration testing.
Identify privilege escalation paths and attack chains.
Assess Kerberos, NTLM, LDAP, Group Policies, and Authentication Security.
Evaluate Tier-0 assets and privileged access security.
Perform lateral movement assessments.

Tools

BloodHound

PingCastle

Mimikatz

Impacket

Rubeus

PowerView

Network Penetration Testing

Assess routers, switches, firewalls, and network devices.
Conduct internal and external attack simulations.
Perform network enumeration and reconnaissance.
Identify misconfigurations and insecure protocols.
Assess firewall and segmentation controls.

Technologies

Cisco

Palo Alto

Fortinet

Check Point

F5

Load Balancers

VPN Technologies

Cloud Security Assessment

Perform security assessments of Azure and AWS environments.
Validate IAM security configurations.
Assess cloud networking and security controls.
Review security posture and compliance gaps.
Conduct privilege escalation testing in cloud environments.

Platforms

Microsoft Azure

AWS

Microsoft Entra ID

AWS IAM

Defender for Cloud

Operating System Security Testing

Windows Security

Windows Server Security Assessment

Active Directory Security Review

Group Policy Review

Privileged Access Assessment

PowerShell Security

Linux Security

Linux hardening validation
Privilege escalation testing
Sudo configuration reviews
SSH security reviews

Vulnerability Management

Conduct authenticated and unauthenticated scans.
Validate vulnerabilities identified by scanning tools.
Perform risk prioritization and remediation recommendations.
Assist infrastructure teams in vulnerability closure.

Tools

Nessus

Qualys

Rapid7 InsightVM

OpenVAS

Nexpose

Red Team Activities

Execute red team simulations.
Emulate real-world threat actors.
Test detection and response capabilities.
Assess SOC monitoring effectiveness.
Validate EDR/XDR security controls.

Security Platforms Exposure

Microsoft Defender for Endpoint

CrowdStrike Falcon

SentinelOne

Microsoft Sentinel

Splunk

Reporting & Remediation

Develop executive and technical assessment reports.
Present findings to security leadership and infrastructure teams.
Provide actionable remediation recommendations.
Support security improvement initiatives.
Conduct security awareness sessions for technical teams.

Required Technical Skills

Infrastructure & Network Security

TCP/IP

Routing & Switching

Firewalls

VPN Technologies

IDS/IPS

Network Segmentation

DNS, DHCP

Security Testing Tools

Burp Suite Professional

Nmap

Metasploit

Nessus

Qualys

Wireshark

BloodHound

CrackMapExec

Responder

Impacket

Operating Systems

Windows Server

Linux Administration

Active Directory

VMware

Hyper-V

Citrix

Scripting

PowerShell

Python

Bash

Automation Scripting

Cloud Security

Azure Security

AWS Security

IAM Security

Entra ID

Cloud Networking

Bachelor's Degree in Cyber Security, Computer Science, Information Technology, or related field.
5-10 years of experience in Penetration Testing, Red Teaming, Security Assessments, or Cyber Security Engineering.
Strong understanding of attack methodologies and security controls.
Experience working with enterprise infrastructure environments.

Preferred Certifications

Offensive Security

OSCP (Highly Preferred)

OSCE

OSEP

CRTO (Certified Red Team Operator)

CRTP (Certified Red Team Professional)

Security Certifications

CISSP

CEH

GPEN

GWAPT

GCIH

CompTIA Security+

Cloud Certifications

AZ-500

AWS Security Specialty

Key Competencies

Infrastructure Penetration Testing

Active Directory Security

Red Team Operations

Network Security Assessments

Vulnerability Management

Exploitation Techniques

Privilege Escalation

Cloud Security Testing

Security Architecture Review

Technical Reporting

Client & Stakeholder Management

Ideal Candidate Profile (Senior Level)

A security professional with 5-10 years of experience in Infrastructure Penetration Testing, Active Directory Security, Windows/Linux Administration, Network Security, VMware/Citrix, Azure/AWS Security, Vulnerability Management, Red Teaming, and Security Consulting. The candidate should be capable of independently leading enterprise security assessments, simulating advanced attack scenarios, validating security controls, and providing strategic remediation guidance to global clients.