Senior Penetration Tester

Senior Penetration Tester at ML, salary $5000–$8000 USD, remote, full-time. Focus on penetration testing web apps, APIs, networks, infrastructure, Active Directory, and vulnerability validation.

We are looking for an experienced Penetration Tester to identify, verify, and support remediation of vulnerabilities across internal company projects and client environments. This role is suitable for a specialist with strong hands-on offensive security skills, able to manually validate vulnerabilities and clearly communicate results to technical teams. Responsibilities: • Conduct penetration testing of web applications, APIs, networks, infrastructure, Active Directory, and other systems. • Identify vulnerabilities using both automated tools and manual testing techniques. • Validate discovered vulnerabilities, confirm their real impact, and exclude false positives. • Assess vulnerabilities from the perspective of common attack techniques and security risks. • Provide clear and practical remediation recommendations for Development and IT teams. • Prepare structured penetration testing reports for internal stakeholders and clients. • Conduct retesting after remediation. • Participate in improving internal security testing approaches and methodologies.

• 3+ years of practical experience in penetration testing, ethical hacking, or offensive security. • Strong knowledge in: - Web Application Penetration Testing - API Security Testing - Network Penetration Testing - Active Directory Security Testing • Hands-on experience with tools such as Burp Suite, Nmap, Metasploit, Nuclei, and similar. • Ability to manually verify vulnerabilities and distinguish real security issues from false positives. • Good understanding of OWASP Top 10 and common attack techniques. • Experience preparing technical penetration testing reports. • Strong analytical skills and ability to solve technical problems. • Ability to clearly explain security findings to both technical and non-technical stakeholders. Certifications: • OSCP will be a big advantage. • OSWE, OSEP, PNPT, or other similar practical offensive security certifications will also be a significant plus. Nice to have: • Experience working with both internal corporate environments and external client projects. • Experience testing complex or distributed infrastructure. • Understanding of vulnerability management and remediation processes. • Experience closely collaborating with Development, DevOps, Infrastructure, and Security teams.

Salary: $5000–$8000 USD. Remote, full-time.