Penetration Tester (Infrastructure/Red Team)

Penetration Tester for infrastructure and Red Team operations. Location: Moscow. Experience: 2+ years. Salary: to be discussed. Company: Reverslab.

Responsibilities: • Plan and conduct realistic penetration tests on external and internal perimeters of corporate networks, simulating tactics, techniques, and procedures (TTPs) of modern APT groups. • Develop and execute full attack scenarios, including initial access, lateral movement, privilege escalation, and persistence. • Deep search, analysis, and exploitation of vulnerabilities in corporate services, including complex attacks on Active Directory infrastructure. • Security analysis of network devices, servers (Windows/Linux), and virtualization systems. • Prepare detailed and clear reports on performed work, including technical details, risk assessment, and specific recommendations for remediation.

Requirements: • 2+ years of experience in infrastructure penetration testing or Red Team operations. • Understanding of Windows and Linux OS internals at system administrator level, including authentication mechanisms, logging, and system services. • Understanding of network security, OS, and database security principles. • Knowledge of network technologies (TCP/IP, DNS, VPN, OSI model) and corporate network design. • Understanding of social engineering principles and techniques. • Practical experience in exploiting Active Directory vulnerabilities (Kerberos, NTLM attacks, GPO misconfigurations, etc.). • Proficiency with main penetration testing tools (Metasploit, Cobalt Strike, Empire, BloodHound, Nmap, Burp Suite, etc.). • Skills in automation of routine tasks using PowerShell and/or Bash. • Understanding of various security products (802.1x, AV, DLP, SIEM, WAF, IPS/IDS, EDR, PAM, UEBA). • English sufficient for reading technical documentation.