Penetration Tester

Job not on LinkedIn

🔥 1 minute ago

🇵🇭 Philippines – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

🔧 QA Engineer (Quality Assurance)

👻 Ghost score 11%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

CyberOne

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2005

🔒 Cybersecurity

🤝 B2B

Cybersecurity • B2B

CyberOne is a UK-based cybersecurity services company that provides 24x7 managed detection and response, incident response, Microsoft security integrations, penetration testing, cloud security, and professional consulting to help organisations build measurable cyber resilience. They deliver AI-augmented MXDR and other managed security services powered by Microsoft technologies, focusing on rapid detection, containment, compliance and continuous risk reduction for enterprise and regulated sectors.

📋 Description

• Conduct comprehensive penetration testing engagements against enterprise infrastructure, networks, systems, and applications • Perform manual and automated security assessments to identify vulnerabilities, weaknesses, and potential attack vectors • Assess and exploit Active Directory environments, including misconfigurations, privilege escalation paths, lateral movement opportunities, credential theft vulnerabilities, and excessive permissions or insecure delegation • Execute network and system exploitation activities to validate security weaknesses and assess their impact • Evaluate security controls, hardening measures, and defensive configurations within Active Directory environments • Simulate real-world attack scenarios to assess organizational resilience against cyber threats • Develop detailed technical reports covering attack paths, findings, business impact, proof-of-concept evidence, and remediation recommendations • Present technical findings to technical and non-technical stakeholders • Work with internal teams and clients to support remediation efforts and provide security best-practice guidance • Stay current with emerging threats, attack techniques, exploitation methodologies, and security technologies

🎯 Requirements

• Proven experience conducting penetration tests across enterprise networks and infrastructure • Strong knowledge of Windows environments and Active Directory security • Experience identifying and exploiting Active Directory vulnerabilities and attack paths • Excellent understanding of network protocols and architecture • Excellent understanding of Windows Server administration • Excellent understanding of authentication mechanisms (Kerberos, NTLM) • Excellent understanding of privilege escalation techniques • Excellent understanding of lateral movement methodologies • Hands-on experience with BloodHound, Mimikatz, CrackMapExec, Impacket, Nmap, Burp Suite, Metasploit, and Responder • Familiarity with OWASP, NIST, and PTES security testing methodologies • Strong technical documentation and report-writing skills • Excellent analytical, troubleshooting, and problem-solving abilities