Internal Penetration Tester

The Internal Penetration Tester works to execute offensive security activities for Pathfynder by A-LIGN. In this role, you will be responsible for the delivery of internal network and cloud-based SaaS penetration testing engagements. As the Internal Penetration Tester, you will provide exceptional technical and client-focused testing strategies to help support the continued growth of our fast-paced company. A-LIGN will depend on you as the Internal Penetration Tester to independently identify and validate real-world security risks, manually exploit vulnerabilities, document findings, and communicate practical remediation guidance to clients. Reports to

Director, Internal Offensive Operations Pay Classification

Full-Time, Exempt Responsibilities

• Execute internal network and cloud-based SaaS penetration testing engagements
• Identify, validate, and manually exploit vulnerabilities using public exploits, custom-developed exploits, or a combination of techniques
• Evaluate findings in context, explore realistic attack paths, and accurately assess business and technical risk
• Deliver clear, accurate, client-ready reports that explain findings, evidence, and actionable remediation guidance
• Communicate technical issues, testing results, and remediation recommendations to client stakeholders
• Maintain project quality and timelines while executing assigned engagements with minimal oversight
• Collaborate with the offensive security team to evaluate industry tools, improve delivery methods, and share technical knowledge
• Mentor team members and contribute to the continued development of team capabilities, Lead biopharma business development across the US West Coast and Central States, acquiring pharmaceutical and biotechnology customers and expanding strategic accounts. Build and manage Salesforce pipeline, develop proposals, negotiate agreements, and close projects involving genomic assays, biomarker discovery, clinical trial assays, precision medicine, and companion diagnostics. Collaborate with scientific, commercial, and operational teams to shape customer solutions. Travel domestically and internationally approximately 30% of the time.

• Degree in cybersecurity, computer information systems, related discipline or equivalent professional, * 5+ years of hands-on offensive security experience, including at least 3 years focused on internal network, Active Directory, red team, or purple team penetration testing
• Experience with network and system exploitation across enterprise environments
• Knowledge of penetration testing methodologies and current offensive security practices
• Experience applying current tactics, techniques, and procedures related to EDR bypass, lateral movement, and privilege escalation
• Preferred red team or purple team penetration testing experience
• Preferred wireless penetration testing experience
• Preferred consulting or client-facing security delivery experience

CERTIFICATIONS

• Preferred OSCP, CEH, or OSEP certification.
• Preferred additional advanced certifications relevant to internal network, Active Directory, red team, or cloud security testing

SKILLS

• Passion for information security and identifying exploitable vulnerabilities before threat actors can take advantage of them.
• Ability to discover and exploit complex vulnerabilities while maintaining a disciplined and repeatable approach to testing.
• Knowledge of Active Directory attack paths, network exploitation, lateral movement, privilege escalation, and defence evasion techniques.
• Proficiency with scripting languages such as Python, Bash, JavaScript, PowerShell, or SQL.
• Proficiency with commonly used offensive security tools such as Nmap, BloodHound, the Impacket suite, Metasploit, Wireshark, and Nessus.
• Knowledge of multiple penetration testing concentrations and the ability to select appropriate methodologies and tools.
• Ability to write clear, concise, client-ready reports with accurate findings and actionable remediation guidance.
• Excellent verbal and written communication skills, with the ability to explain technical risks to technical and non-technical audiences.
• Ability to work independently and collaboratively in a fast-paced, remote environment while meeting deadlines.
• Continuous desire to grow technical capabilities, improve delivery efficiency, and share knowledge with team members and clients.
• Cloud architecture knowledge across AWS, Microsoft Azure, or Google Cloud Platform is preferred.

• Healthcare, Dental, and Vision Benefits
• Employer Paid Life Insurance and Disability Insurance
• EAP - Employee Assistance Program
• Pet Insurance
• 401(k) Plan with Employer Matching
• Competitive Bonus Structure
• Technology Allowance
• Certification Reimbursement
• Personalised Career Coaching
• Generous Paid Time Off
• Paid Office Closure December 25-January 1
• Vacation Bonus
• Summer Hours, An Hour Ago Remote or Hybrid 174K-198K Annually Senior level 174K-198K Annually Senior level Artificial Intelligence * Cloud * HR Tech * Information Technology * Productivity * Software * Automation Develops new business within major Health Life Sciences accounts, manages executive customer relationships, leads cross-functional virtual teams, aligns ServiceNow solutions to strategic outcomes, expands worldwide account resources, builds client relationships, and achieves license, renewal, and professional services revenue targets. Top Skills: Artificial IntelligenceCustomer Service ManagementIt Operations ManagementIt Service ManagementSecurity OperationsServicenow SOPHiA GENETICS, 140K-195K Annually Entry level 140K-195K Annually Entry level Cloud * Computer Vision * Information Technology * Sales * Security * Cybersecurity Lead incident response consulting engagements, including client scoping, forensic and malware investigations, threat hunting, remediation planning, and executive communications. Coach junior analysts conducting host and network forensics across Windows, macOS, and Linux. Develop recommendations to improve clients’ security posture, produce reports for stakeholders and legal counsel, contribute thought leadership, and travel up to 30% as needed. Top Skills: Artificial IntelligenceAWSBro/ZeekGoogle Cloud PlatformLinuxmacOSMalware AnalysisAzureNetwork ProtocolsSuricataWindows

What you need to know about the Colorado Tech Scene

With a business-friendly climate and research universities like CU Boulder and Colorado State, Colorado has made a name for itself as a startup ecosystem. The state boasts a skilled workforce and high quality of life thanks to its affordable housing, vibrant cultural scene and unparalleled opportunities for outdoor recreation. Colorado is also home to the National Renewable Energy Laboratory, helping cement its status as a hub for renewable energy innovation.

Key Facts About Colorado Tech

• Number of Tech Workers: 260,000; 8.5% of overall workforce (2024 CompTIA survey)
• Major Tech Employers: Lockheed Martin, Century Link, Comcast, BAE Systems, Level 3
• Key Industries: Software, artificial intelligence, aerospace, e-commerce, fintech, healthtech
• Funding Landscape: $4.9 billion in VC funding in 2024 (Pitchbook)
• Notable Investors: Access Venture Partners, Ridgeline Ventures, Techstars, Blackhorn Ventures
• Research Centers and Universities: Colorado School of Mines, University of Colorado Boulder, University of Denver, Colorado State University, Mesa Laboratory, Space Science Institute, National Center for Atmospheric Research, National Renewable Energy Laboratory, Gottlieb Institute

Pathfynder by A-LIGN is a technology-enabled cybersecurity company providing offensive and defensive cybersecurity services under A-LIGN, a security and compliance partner trusted by more than 2,400 global organisations to help mitigate cybersecurity risks. We work with organisations ranging from small businesses to global enterprises, with services spanning SOC, Penetration Testing, PCI DSS, HITRUST, ISO, and privacy compliance. Our proprietary compliance management platform is transforming the compliance experience by enabling an anytime, anywhere approach to audits. To learn more, visit A-LIGN.com.