Penetration Test Infra

Senior Infrastructure Penetration Tester / Infrastructure Security Consultant – Job Description Job Title: Senior Infrastructure Penetration Tester Experience: 5-10 Years (Senior) / 8-12 Years (Lead) Department: Cyber Security / Offensive Security / Red Team Role Summary We are seeking an experienced Senior Infrastructure Penetration Tester to perform security assessments, vulnerability exploitation, red team exercises, and infrastructure security testing across enterprise on-premises, cloud, network, server, virtualization, and Active Directory environments. The candidate should possess strong expertise in Network Penetration Testing, Active Directory Security, Windows/Linux Security, Cloud Security, Red Team Operations, Vulnerability Assessment, Privilege Escalation, and Security Remediation Consulting . Key Responsibilities Infrastructure Penetration Testing Perform internal and external network penetration testing. Conduct vulnerability assessments and security audits. Identify security weaknesses across servers, networks, endpoints, and infrastructure components. Validate vulnerabilities through controlled exploitation. Perform security assessments for hybrid cloud environments. Active Directory Security Testing Conduct Active Directory penetration testing. Identify privilege escalation paths and attack chains. Assess Kerberos, NTLM, LDAP, Group Policies, and Authentication Security. Evaluate Tier-0 assets and privileged access security. Perform lateral movement assessments. Tools BloodHound PingCastle Mimikatz Impacket Rubeus PowerView Network Penetration Testing Assess routers, switches, firewalls, and network devices. Conduct internal and external attack simulations. Perform network enumeration and reconnaissance. Identify misconfigurations and insecure protocols. Assess firewall and segmentation controls. Technologies Cisco Palo Alto Fortinet Check Point F5 Load Balancers VPN Technologies Cloud Security Assessment Perform security assessments of Azure and AWS environments. Validate IAM security configurations. Assess cloud networking and security controls. Review security posture and compliance gaps. Conduct privilege escalation testing in cloud environments. Platforms Microsoft Azure AWS Microsoft Entra ID AWS IAM Defender for Cloud Operating System Security Testing Windows Security Windows Server Security Assessment Active Directory Security Review Group Policy Review Privileged Access Assessment PowerShell Security Linux Security Linux hardening validation Privilege escalation testing Sudo configuration reviews SSH security reviews Vulnerability Management Conduct authenticated and unauthenticated scans. Validate vulnerabilities identified by scanning tools. Perform risk prioritization and remediation recommendations. Assist infrastructure teams in vulnerability closure. Tools Nessus Qualys Rapid7 InsightVM OpenVAS Nexpose Red Team Activities Execute red team simulations. Emulate real-world threat actors. Test detection and response capabilities. Assess SOC monitoring effectiveness. Validate EDR/XDR security controls. Security Platforms Exposure Microsoft Defender for Endpoint CrowdStrike Falcon SentinelOne Microsoft Sentinel Splunk Reporting & Remediation Develop executive and technical assessment reports. Present findings to security leadership and infrastructure teams. Provide actionable remediation recommendations. Support security improvement initiatives. Conduct security awareness sessions for technical teams. Required Technical Skills Infrastructure & Network Security TCP/IP Routing & Switching Firewalls VPN Technologies IDS/IPS Network Segmentation DNS, DHCP Security Testing Tools Burp Suite Professional Nmap Metasploit Nessus Qualys Wireshark BloodHound CrackMapExec Responder Impacket Operating Systems Windows Server Linux Administration Active Directory VMware Hyper-V Citrix Scripting PowerShell Python Bash Automation Scripting Cloud Security Azure Security AWS Security IAM Security Entra ID Cloud Networking Qualifications Bachelor's Degree in Cyber Security, Computer Science, Information Technology, or related field. 5-10 years of experience in Penetration Testing, Red Teaming, Security Assessments, or Cyber Security Engineering. Strong understanding of attack methodologies and security controls. Experience working with enterprise infrastructure environments. Preferred Certifications Offensive Security OSCP (Highly Preferred) OSCE OSEP CRTO (Certified Red Team Operator) CRTP (Certified Red Team Professional) Security Certifications CISSP CEH GPEN GWAPT GCIH CompTIA Security+ Cloud Certifications AZ-500 AWS Security Specialty Key Competencies Infrastructure Penetration Testing Active Directory Security Red Team Operations Network Security Assessments Vulnerability Management Exploitation Techniques Privilege Escalation Cloud Security Testing Security Architecture Review Technical Reporting Client & Stakeholder Management Ideal Candidate Profile (Senior Level) A security professional with 5-10 years of experience in Infrastructure Penetration Testing, Active Directory Security, Windows/Linux Administration, Network Security, VMware/Citrix, Azure/AWS Security, Vulnerability Management, Red Teaming, and Security Consulting . The candidate should be capable of independently leading enterprise security assessments, simulating advanced attack scenarios, validating security controls, and providing strategic remediation guidance to global clients. Senior Infrastructure Penetration Tester / Infrastructure Security Consultant – Job Description Job Title: Senior Infrastructure Penetration Tester Experience: 5-10 Years (Senior) / 8-12 Years (Lead) Department: Cyber Security / Offensive Security / Red Team Role Summary We are seeking an experienced Senior Infrastructure Penetration Tester to perform security assessments, vulnerability exploitation, red team exercises, and infrastructure security testing across enterprise on-premises, cloud, network, server, virtualization, and Active Directory environments. The candidate should possess strong expertise in Network Penetration Testing, Active Directory Security, Windows/Linux Security, Cloud Security, Red Team Operations, Vulnerability Assessment, Privilege Escalation, and Security Remediation Consulting . Key Responsibilities Infrastructure Penetration Testing Perform internal and external network penetration testing. Conduct vulnerability assessments and security audits. Identify security weaknesses across servers, networks, endpoints, and infrastructure components. Validate vulnerabilities through controlled exploitation. Perform security assessments for hybrid cloud environments. Active Directory Security Testing Conduct Active Directory penetration testing. Identify privilege escalation paths and attack chains. Assess Kerberos, NTLM, LDAP, Group Policies, and Authentication Security. Evaluate Tier-0 assets and privileged access security. Perform lateral movement assessments. Tools BloodHound PingCastle Mimikatz Impacket Rubeus PowerView Network Penetration Testing Assess routers, switches, firewalls, and network devices. Conduct internal and external attack simulations. Perform network enumeration and reconnaissance. Identify misconfigurations and insecure protocols. Assess firewall and segmentation controls. Technologies Cisco Palo Alto Fortinet Check Point F5 Load Balancers VPN Technologies Cloud Security Assessment Perform security assessments of Azure and AWS environments. Validate IAM security configurations. Assess cloud networking and security controls. Review security posture and compliance gaps. Conduct privilege escalation testing in cloud environments. Platforms Microsoft Azure AWS Microsoft Entra ID AWS IAM Defender for Cloud Operating System Security Testing Windows Security Windows Server Security Assessment Active Directory Security Review Group Policy Review Privileged Access Assessment PowerShell Security Linux Security Linux hardening validation Privilege escalation testing Sudo configuration reviews SSH security reviews Vulnerability Management Conduct authenticated and unauthenticated scans. Validate vulnerabilities identified by scanning tools. Perform risk prioritization and remediation recommendations. Assist infrastructure teams in vulnerability closure. Tools Nessus Qualys Rapid7 InsightVM OpenVAS Nexpose Red Team Activities Execute red team simulations. Emulate real-world threat actors. Test detection and response capabilities. Assess SOC monitoring effectiveness. Validate EDR/XDR security controls. Security Platforms Exposure Microsoft Defender for Endpoint CrowdStrike Falcon SentinelOne Microsoft Sentinel Splunk Reporting & Remediation Develop executive and technical assessment reports. Present findings to security leadership and infrastructure teams. Provide actionable remediation recommendations. Support security improvement initiatives. Conduct security awareness sessions for technical teams. Required Technical Skills Infrastructure & Network Security TCP/IP Routing & Switching Firewalls VPN Technologies IDS/IPS Network Segmentation DNS, DHCP Security Testing Tools Burp Suite Professional Nmap Metasploit Nessus Qualys Wireshark BloodHound CrackMapExec Responder Impacket Operating Systems Windows Server Linux Administration Active Directory VMware Hyper-V Citrix Scripting PowerShell Python Bash Automation Scripting Cloud Security Azure Security AWS Security IAM Security Entra ID Cloud Networking Qualifications Bachelor's Degree in Cyber Security, Computer Science, Information Technology, or related field. 5-10 years of experience in Penetration Testing, Red Teaming, Security Assessments, or Cyber Security Engineering. Strong understanding of attack methodologies and security controls. Experience working with enterprise infrastructure environments. Preferred Certifications Offensive Security OSCP (Highly Preferred) OSCE OSEP CRTO (Certified Red Team Operator) CRTP (Certified Red Team Professional) Security Certifications CISSP CEH GPEN GWAPT GCIH CompTIA Security+ Cloud Certifications AZ-500 AWS Security Specialty Key Competencies Infrastructure Penetration Testing Active Directory Security Red Team Operations Network Security Assessments Vulnerability Management Exploitation Techniques Privilege Escalation Cloud Security Testing Security Architecture Review Technical Reporting Client & Stakeholder Management Ideal Candidate Profile (Senior Level) A security professional with 5-10 years of experience in Infrastructure Penetration Testing, Active Directory Security, Windows/Linux Administration, Network Security, VMware/Citrix, Azure/AWS Security, Vulnerability Management, Red Teaming, and Security Consulting . The candidate should be capable of independently leading enterprise security assessments, simulating advanced attack scenarios, validating security controls, and providing strategic remediation guidance to global clients.