Penetration Tester / Offensive Security Consultant

Job not on LinkedIn

🔥 0 minutes ago

🇺🇸 United States – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

🔧 QA Engineer (Quality Assurance)

👻 Ghost score 15%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

SynerComm Inc.

WebsiteLinkedInAll Job Openings

51 - 200 employees

💼 Consulting

📦 Logistics

🔒 Cybersecurity

Consulting • Logistics • Cybersecurity

SynerComm Inc. is a cybersecurity firm specializing in a wide range of services including penetration testing, continuous penetration testing, and compliance solutions such as PCI and HIPAA. They provide expert guidance in cybersecurity lifecycle needs and focus on assessing, architecting, deploying, operating, and staffing for network and security infrastructures. With a strong emphasis on multicloud and SASE technologies, SynerComm also offers technology sourcing and staff augmentation services for clients seeking to enhance their cybersecurity posture and infrastructure solutions.

📋 Description

• Perform infrastructure, network, web application, API, and other penetration testing engagements for clients • Assess Microsoft Active Directory, Entra ID, and related identity and authentication environments • Identify attack paths, validate security controls, and demonstrate the real-world impact of vulnerabilities • Perform application security reviews covering web applications, services, APIs, mobile applications, and other client software • Participate in social engineering, wireless, cloud, and other specialized security assessments • Develop clear professional reports explaining technical findings, business risk, and practical remediation guidance • Communicate directly with clients before, during, and after engagements • Research new attack techniques, technologies, tools, and defensive controls • Build, modify, or automate tools and workflows • Collaborate with teammates to improve services, methodologies, internal tooling, and client experience • Take increasing ownership, including leading complex engagements, mentoring teammates, improving methodologies, and developing new services

🎯 Requirements

• Hands-on experience with penetration testing, offensive security, application security, security research, systems administration, software development, artificial intelligence, or closely related technical disciplines • Strong understanding of common operating systems, networking concepts, authentication technologies, and security controls • Working knowledge of modern penetration testing techniques and common vulnerability classes • Ability to work remotely and independently, manage time effectively, and collaborate closely with teammates • Strong written and verbal communication skills, including explaining technical issues to technical and non-technical audiences • Consulting mindset, professional judgment, and commitment to responsible and ethical security testing • Curiosity and willingness to learn • Willingness to travel for on-site testing, client interaction, company events, and meetings • OSCP or OSCE certification and 4+ years of penetration testing experience would help the candidate stand out • Experience with Active Directory, Entra ID, Windows, Linux, web applications, APIs, cloud environments, or mobile applications • Experience with Burp Suite, CobaltStrike, Nmap, BloodHound, Impacket, NetExec, Metasploit, and other modern offensive security tooling • Software development or scripting experience with Python, PowerShell, C#, JavaScript/TypeScript, Go, or other relevant languages • Experience developing exploits, modifying proof-of-concept code, reverse engineering, or bypassing security controls • Experience with AWS, Microsoft Azure, Microsoft 365, or other cloud and SaaS environments • Interest or experience using AI for security research, testing workflows, automation, analysis, or offensive security capability development • Security research, CTF participation, lab environments, open-source contributions, technical writing, or other evidence of hands-on curiosity • Practical technical ability and experience are more important than any specific certification

🏖️ Benefits

• Fully remote work arrangement • Opportunity to work with an experienced team of security consultants • Growth across infrastructure, applications, identity, cloud, social engineering, research, and offensive security • Opportunities to lead complex engagements, mentor teammates, improve methodologies, and develop new services • Access to experiment with the latest cybersecurity technologies • Opportunities to work with automation, development, and AI-assisted approaches • Company events and meetings (average 2–3 times per year)