Associate Penetration Tester

Job not on LinkedIn

🔥 0 minutes ago

🇺🇸 United States – Remote

⏰ Full Time

🟢 Junior

🟡 Mid-level

🔧 QA Engineer (Quality Assurance)

🚫👨‍🎓 No degree required

👻 Ghost score 12%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Netrio

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 2003

💼 Consulting

📦 Logistics

🔒 Cybersecurity

Consulting • Logistics • Cybersecurity

Netrio is a full-service managed IT and cybersecurity provider focused on mid-market to enterprise customers. The company delivers managed IT services (endpoint, server, network, and end-user management), comprehensive cybersecurity (MDR, EDR, XDR, 24/7 SOC, incident response), connectivity and voice solutions (network aggregation, SIP, UCaaS/CCaaS, Teams routing), cloud services (public/private cloud management and backups), and custom application development and professional services. Netrio emphasizes outcome-driven, scalable IT operations, AI-driven threat detection, and rapid incident response for business-critical environments.

📋 Description

• Conduct external network penetration tests: attack surface enumeration, service and application discovery, credential attacks, and exploitation of exposed services within an approved scope • Conduct internal network penetration tests: network and host enumeration, Active Directory reconnaissance and attack path analysis, credential harvesting and reuse, privilege escalation, and lateral movement • Validate vulnerability scanner output and eliminate false positives through manual testing • Capture reproducible evidence for every finding • Perform remediation retesting • Operate strictly within the authorized scope and rules of engagement on every engagement • Work alongside senior testers on live client engagements from the start

🎯 Requirements

• 1-3 years in IT, systems or network administration, SOC, or a related field, or demonstrable hands-on offensive security skill through labs and personal projects • Solid networking fundamentals: TCP/IP, DNS, SMB, LDAP, HTTP/S • Working knowledge of Windows and Active Directory, including common misconfigurations • Comfortable in a Linux terminal • Familiarity with standard tooling such as Nmap, Nessus, Metasploit, Impacket, BloodHound, Responder, Hashcat, and Burp Suite • Basic scripting in Python, PowerShell, or Bash • Strong written communication and a professional client-facing demeanor • OSCP, PNPT, CPTS, eJPT, or CRTP — held or in progress (preferred) • Documented lab or CTF work you can discuss in detail (preferred) • Prior systems or network administration experience (preferred) • Exposure to cloud or web application testing (preferred)