> Markdown version of [/jobs/ext/1917588-internal-network-penetration-tester](https://www.wearedevelopers.com/jobs/ext/1917588-internal-network-penetration-tester). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Internal Network Penetration Tester

- **Company:** Xtreme Inc
- **Location:** San Bernardino, CA, United States
- **Experience:** Experienced
- **Contract:** Permanent contract
- **Skills:** Password Cracking, Private Networks, Active Directory, Software System Penetration Testing, Data Centers, Phishing
- **Published:** August 4, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=385328bb0be7e744

## About the Role

* 4+ years of internal/network penetration testing experience, including Active Directory attack paths.
 * Comfort working onsite at client facilities, including data centers and administrative offices.
 * Experience with internal recon and lateral movement tooling (BloodHound, Responder, or equivalent).

Preferred Qualifications

 * OSCP or GPEN certification.
 * Experience testing in HIPAA-regulated or government network environments.

## Description

Executes internal network penetration testing from two pre-determined footholds - an unauthenticated physical network port and a simulated-phishing authenticated workstation - across County facilities, testing servers, workstations, endpoints, and password strength., * Physically connect to County network ports to simulate an unauthenticated internal attacker.

 * Simulate a successful phishing/Trojan compromise from an authenticated workstation foothold.
 * Attempt password cracking and lateral movement while evading department detection and response efforts.
 * Document internal attack paths, exploited vulnerabilities, and business impact for each department report.


## Related Videos

- [Small, Secure, Interconnected: The next Internet Protocol](https://www.wearedevelopers.com/videos/100062-small-secure-interconnected-the-next-internet-protocol)
- [The Sustainability Race: AI's Promises, Pitfalls and Potential](https://www.wearedevelopers.com/videos/100155-the-sustainability-race-ai-s-promises-pitfalls-and-potential)
- [Passkeys: Truly Phishing-Resistant? Implementation and Pitfalls](https://www.wearedevelopers.com/videos/100156-passkeys-truly-phishing-resistant-implementation-and-pitfalls)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company)
- [MFA? Game over! Watch your protection collapse – live](https://www.wearedevelopers.com/videos/100322-mfa-game-over-watch-your-protection-collapse-live)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)
- [The top 200 passwords of 2024 can be cracked in less than a second](https://www.wearedevelopers.com/magazine/502-the-top-200-passwords-of-2024-can-be-cracked-in-less-than-a-second)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)
- [The 8 Best Code Testing Tools](https://www.wearedevelopers.com/magazine/402-the-8-best-code-testing-tools)