Lead Penetration Tester (Remote)
Location: Remote Duration: 7 Weeks Primary responsibilities: Direct testing methodology and safety controls; conduct assumed-breach testing from up to three network locations; assess privilege escalation, lateral movement, and segmentation; lead authenticated vulnerability scanning and wireless configuration review; assess Microsoft 365, Entra ID, and Azure configurations; evaluate MFA and timeout settings; validate findings and recommend remediation. Reporting responsibilities: Own technical accuracy, risk prioritization, NIST SP 800-53 Rev. 5/CSF 2.0 mappings, and remediation recommendations; prepare the internal/configuration report and contribute to the final report and briefing. Required technical knowledge: AD and Entra ID attack paths; network protocols and segmentation; vulnerability assessment; Wi-Fi controller configuration; Microsoft 365/Azure security; conditional access, MFA, PIM, Defender, and logging; CIS benchmarks and NIST frameworks. Recommended experience: 5+ years in penetration testing/security assessment, with demonstrated AD, Entra ID, and Microsoft 365 experience and hands-on Azure configuration review capability. Recommended certifications: OSCP, OSEP, GPEN, or equivalent; relevant Microsoft security credentials such as SC-100 or SC-300 desirable. Key deliverables: Validated internal/cloud findings; vulnerability and configuration assessment results; authentication/timeout recommendations; internal technical/executive report; prioritized remediation roadmap.