Penetration Tester

• Scope penetration testing projects
• Perform manual penetration testing
• Communicate testing progress and updates
• Create penetration testing reports

• Experience with finding, exploiting, and reporting vulnerabilities
• In-depth knowledge of industry-standard vulnerabilities and testing methodologies
• Knowledge of web browsers, web applications, and APIs
• Knowledge of HTML, JavaScript, and server-side languages
• Knowledge of Active Directory, along with permissions and common misconfigurations
• Understanding of industry-standard security tools
• Ability to concurrently manage multiple, highly complex tasks
• Ability to proficiently communicate with customers
• Ability to collaborate with other engineers
• Strong attention to detail and technical writing skills

Experience requirements

• Knowledge of a programming or scripting language (Python, C#, Golang, shell scripting, or similar)
• Penetration Testing: 2 years
• Burp Suite: 2 years
• Nessus: 2 years
• Active Directory: 2 years
• AWS/Azure/GCP: 2 years
• Linux: 2 years

Nice to have

• Experience with performing “assumed breach” penetration tests on internal networks and cloud environments
• Experience leading phishing campaigns, including custom template creation
• Credited with findings in Bug Bounty or public security programs
• CTF experience
• Attributed CVEs or other public research
• Certifications (OSCP, BSCP, CPTS, etc)

Halo Security is seeking highly motivated candidates for our security team. You will work with industry leaders and help customers leverage the Halo Security platform to measure and manage security risks across their organization.