Penetration Tester – Infrastructure, Red Team

🔥 33 minutes ago

🇨🇦 Canada – Remote

💵 $90k - $120k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

🔧 QA Engineer (Quality Assurance)

👻 Ghost score 1%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Packetlabs

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2011

💼 Consulting

🏥 Healthcare

📦 Logistics

Consulting • Healthcare • Logistics

Packetlabs is a CREST-accredited, SOC 2 Type II attested cybersecurity firm specializing in impact-first penetration testing and red teaming. They provide comprehensive on-premise, cloud, application, API, mobile, OT, and AI/LLM penetration testing, as well as social engineering, purple teaming, and cyber maturity assessments, focusing on actionable findings with zero false positives and no outsourcing. Packetlabs serves enterprise clients across industries such as retail, finance, healthcare, and telecom, emphasizing North American data residency and OSCP-certified staff.

📋 Description

• Plan and execute infrastructure penetration testing engagements across on-premises, hybrid, cloud, wireless, and enterprise network environments • Perform internal and external network penetration testing to identify, validate, and exploit security vulnerabilities using manual testing methodologies and industry-standard offensive security tools • Assess Active Directory, Microsoft Entra ID (Azure AD), Windows and Linux environments, virtualization platforms, cloud services, and supporting infrastructure • Evaluate AWS, Microsoft Azure, and Google Cloud Platform environments for configuration weaknesses, privilege escalation opportunities, identity risks, and cloud security vulnerabilities • Assess containerized environments, Kubernetes platforms, CI/CD pipelines, and cloud-native technologies where applicable • Participate in and lead adversary simulation, red team, and objective-based security engagements • Execute offensive security operations across reconnaissance, initial access, persistence, privilege escalation, credential access, lateral movement, defense evasion, command and control, and objective execution • Support purple team engagements by validating detections, improving monitoring capabilities, and strengthening defensive controls • Develop and execute attack scenarios demonstrating realistic business impact while maintaining client system integrity • Prepare technical reports communicating vulnerabilities, attack paths, business impact, risk ratings, and remediation recommendations • Present assessment findings to technical teams, executive stakeholders, and client leadership • Provide technical guidance on remediation strategies, security architecture, and defensive improvements • Manage assigned engagements to achieve delivery quality, timelines, and client expectations • Contribute to testing methodologies, internal tooling, technical documentation, service offerings, research, automation, training, and knowledge-sharing • Collaborate with consulting teams to strengthen technical quality, consistency, and service delivery • Perform other duties as assigned

🎯 Requirements

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related discipline; equivalent practical experience will be considered • Minimum of 3 years of professional experience performing infrastructure penetration testing, red teaming, adversary simulation, or offensive security consulting • Experience conducting penetration testing across enterprise infrastructure, including Windows, Linux, Active Directory, Microsoft Entra ID, cloud platforms, and enterprise networking • Experience performing internal and external network penetration testing, privilege escalation, Active Directory security assessments, and lateral movement testing • Experience assessing cloud environments, including AWS, Microsoft Azure, or Google Cloud Platform • Strong understanding of enterprise networking, authentication technologies, identity management, cloud security, and offensive security methodologies • Experience using industry-standard offensive security frameworks, tools, and tradecraft • Excellent technical writing, presentation, and communication skills, with the ability to communicate findings to both technical and executive stakeholders • Industry certifications such as OSCP, OSEP, CRTO, CRTE, CARTP, CARTA, CREST CRT, CREST CCT, PNPT, GPEN, GXPN, or equivalent are considered an asset • OSCP or equivalent demonstrated technical capability is strongly preferred • Experience participating in Red Team, Purple Team, adversary simulation, or threat emulation engagements is considered an asset • Customer-first mentality • Ability to adapt to rapidly changing environments • Self-motivated and dependable • Willingness to continuously learn and improve • Humility and lack of ego • Fully remote within Canada

🏖️ Benefits

• Immediate and ongoing offensive security training, mentorship, and professional development • Competitive compensation and growth opportunity • GRRSP with corporate matching in Canada • Participation in corporate benefit plans within Canada • Flexible work environment • Fully remote within Canada

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume