Red Team Penetration Tester (Mid-Level)
We're hiring a mid-level penetration tester to join our red team. You'll plan and execute engagements against client networks, applications, and cloud environments, working from scoping through reporting, and collaborate directly with clients' defenders during purple team exercises.
Responsibilities
- Plan and execute network, application, and cloud penetration tests against client environments
- Contribute to full-scope red team engagements, including initial access, lateral movement, and objective-based operations
- Write clear, evidence-backed reports that clients' engineering teams can act on
- Support purple team exercises alongside client blue teams
- Stay current with new tooling, TTPs, and detection trends relevant to client environments
Requirements
- 3 to 5 years of hands-on penetration testing or red team experience
- Solid understanding of Active Directory, common network protocols, and web application vulnerabilities
- Experience with standard offensive tooling (Cobalt Strike or similar C2, Burp Suite, Nmap, Impacket, BloodHound)
- Comfortable scripting in Python, PowerShell, or Bash to build or adapt tooling
- A recognized certification (OSCP, OSCE, OSEP, or equivalent demonstrated experience) is a plus, not required
- Clear written and verbal communication in English; Mandarin or Bahasa Malaysia is a plus given our client base