Network Penetration Tester: Senior Associate

Reporting to the Offensive Cyber Operations Team Lead, you will be responsible for conducting advanced security assessments, including automated and manual testing, across a wide range of technologies and systems. As a senior technical assessor, you will participate in the planning, execution, and reporting of complex security tests designed to emulate real-world adversaries. You will be a key member of the Offensive Cyber Operations (OCO) team and are expected to contribute to threat modeling, emergent technology research, and a high-tempo testing schedule., * Conduct automated and manual security tests of information systems, including analysis of vulnerability scan results, compliance findings, and penetration test data.

• Utilize advanced techniques such as threat modeling, threat simulation, and social engineering to assess system risk.
• Research and understand a wide variety of existing and emerging technologies relevant to assessment activities.
• Develop test plans, create operational schedules, execute tests, and prepare detailed after-action reports.
• Document all activities in accordance with Information Security Policies and Offensive Cyber Operations team standard operating procedures.
• Participate in year-round testing cycles based on criticality, threat modeling, and new points of vulnerability (NPOV).
• Collaborate with teammates to support large, complex, and multi-assessor security projects.
• Maintain a professional bearing and represent the team effectively when interacting with system owners and business stakeholders.

Experience: At least five (5) years of professional-level experience in one or more technical disciplines, including Penetration Testing, Networking, Firewalls, Server Administration, Encryption, Cloud, Containers, Databases, or Software Development.

Technical Skills: Possess hands-on, expert-level technical proficiency in at least one critical skill area. Demonstrate advanced understanding of adversarial tactics, techniques, and procedures (TTPs). Be proficient with multiple open-source and commercial security tools (e.g., Nessus, Burp Suite, AppDetective, Metasploit, NMAP). Have strong proficiency working with both UNIX-based and Microsoft operating systems, with deep systems engineering experience in at least one of them. Understand security guidelines such as NIST 800-53 and NIST 800-115., * Hold (or be working toward) multiple professional or associate-level certifications, such as CISSP, GCIH, MCSE, CCNP, RHCE, GPEN, GWAPT, OSCP, MPCE, or CEH.

• Ability to synthesize and analyze large volumes of data from complex systems.
• Demonstrate the ability to clearly articulate technical findings to both technical and non-technical audiences.
• Exhibit strong critical-thinking ability and creativity in designing and executing test approaches.

Everforth Apex is a world-class IT services company that serves thousands of clients across the globe. When you join Everforth Apex, you become part of a team that values innovation, collaboration, and continuous learning. We offer quality career resources, training, certifications, development opportunities, and a comprehensive benefits package. Our commitment to excellence is reflected in many awards, including ClearlyRateds Best of Staffing in Talent Satisfaction in the United States and Great Place to Work in the United Kingdom and Mexico.

Everforth Apex uses a virtual recruiter as part of the application process. Click for more details. By applying for this job, you agree to receive calls, AI-generated calls, text messages, or emails from Everforth Apex and its affiliates, and contracted partners. Frequency varies for text messages. Message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You can reply STOP to cancel and HELP for help. You can access our privacy policy at