Penetration Tester/Ethical Hacker Cybersecurity

Our client, a Media, Information and Services company, is looking for a Penetration Tester/Ethical Hacker Cybersecurity for their Remote location. Responsibilities:

• Client Technology, Inc, Information Security Office seeks a Penetration Tester / Ethical Hacker for their Exposure Management Team. The Penetration Tester is responsible for strengthening Client cyber security posture through manual and automated penetration testing, red team engagements, and offensive security assessments. The scope of the position's responsibilities includes planning and executing tests across applications, networks, and infrastructure to uncover exploitable vulnerabilities and attack paths that may be present within multiple environments. This role will help reduce the attack surface at client through identifying, prioritizing, and partnering with various departments for timely vulnerability remediation.
• The Cybersecurity foundation is multi-faceted and focuses on driving value. Our mission is to establish an integrated program that ensures the overall effectiveness of capabilities that impact information security across business units globally.
• Plan and execute penetration tests across web applications, APIs, mobile apps, networks, cloud infrastructure (AWS/Azure/GCP), and internal systems
• Perform manual exploitation and validation of vulnerabilities to eliminate false positives and uncover logic flaws automated tools miss
• Design, configure, and run automated vulnerability scanning pipelines to accelerate coverage and consistency across engagements
• Build and deploy AI-agent-driven testing workflows to accelerate reconnaissance, fuzzing, exploit chaining, and report generation
• Ability to analyze the environment from a threat actor's perspective, including the skill to conduct prioritized identification of vulnerable assets, and then devise techniques to exploit potential attack paths
• Identifies security risks, threats, misconfigurations and vulnerabilities of existing networks, systems, applications and develops solutions to remediate identified threats
• Perform red team engagements simulating advanced persistent threat (APT) tactics, techniques, and procedures (TTPs)
• Tracking and documenting testing activities and providing updates to leadership through executive summaries and in-depth technical reports
• Other duties as assigned
• Reporting gaps in a meaningful way that addresses a business risk as well as providing technical solutions to the operations teams in remediation is key

Requirements:

• High performance skillset which not only understands the threat spaces as it relates to risks, but also able to meet the technical challenge of communicating this out to our teams
• 3+ years of direct experience performing penetration testing / red teaming in an active corporate environment
• Experience consuming and analyzing Cyber Threat Intelligence for actionable takeaways
• Experience explaining testing objectives and findings in plain English and able to communicate associated risk
• Relevant experience required
• Skills or experience required:
• This is not a beginner level position and requires comfort and experience with manual security work, low level functionality, web application functionality, IT security, and vulnerability and threat management
• Minimum 3 years of experience in the practice of penetration testing / ethical hacking
• Technical Skills
• Demonstrated experience planning and executing penetration test and red team engagements
• Comfort operating in terminal environments
• Ability to analyze an architectural document and strategically probe accordingly
• Working knowledge of common (HTTP, DNS, SMB, etc.) networking protocols
• Familiar with operation of both Windows and Linux based systems
• Proficient with cross platform scripting languages such as Python or Golang, also PowerShell
• Experience working with various technologies and platforms such as AWS, Azure, O365, GCP, containers, etc.
• Proficiency with industry-standard testing tools such as Burp Suite, Metasploit, Nmap, Wireshark, Cobalt Strike, BloodHound, and the Kali Linux toolset
• Practical experience integrating AI/LLM-based agents or copilots into security testing workflows (e.g., AI-assisted recon, automated exploit suggestion, agentic fuzzing frameworks) to accelerate results
• Understanding of current cyber threat landscape, the different tactics commonly used by adversaries and how one would exploit, chain, and report against similar attack paths
• Desired Skills
• Strong work ethic with attention to detail
• Demonstrated analytical abilities
• Attention to detail, verbal and written communication, initiative, and motivation to learn
• Strong written/oral communication skills required along with desire and ability to communicate with business leaders through all levels of the organization
• Self-motivated with excellent planning and organizational skills; and the ability to prioritize tasks to meet deadlines and effectively manage changing priorities
• Refined interpersonal skills with the ability to liaise confidently and professionally with a diverse range of people
• Professional customer orientation with a strong commitment to providing a high standard of customer satisfaction
• Ability to deliver client-ready documentation and participate in relevant client meetings
• Working understanding of project management principles, processes, and documentation
• Able to work across teams effectively and efficiently
• Preferred Education and Experience
• Relevant industry standard certification(s) preferred: OSCP, other possibilities: OSCE, OSWE, GPEN, GXPN, CEH, CISSP
• Bachelor's degree in information technology, Computer Science, Quality Assurance or equivalent
• Top 3 Must-Haves (Hard and/or soft Skills)
• Knowledge of pen testing tools (Wiz, unit 6, strix)
• Familiarity with AI tools (this will be less full pen. Testing, and more AI)
• Top 3 Nice-To-Haves (Hard and/or soft Skills)
• Communication; this worker would frequently be interacting with other business units, explaining processes, etc.
• How many years of experience do you expect candidates to have:
• 3 years noted in JD (not seeking Senior level employee)
• Degree requirements (experience in lieu of degree)
• Bachelor (see certs below)
• Certification requirements (are there preferences)
• OSCP, other possibilities: OSCE, OSWE, GPEN, GXPN, CEH, CISSP
• What interaction level with this role have with team members and the hiring manager:
• This candidate will report to Manager as manager and will have regular check-ins
• Softwares:
• Windows and Linux based systems
• Proficient with cross platform scripting languages such as Python or Golang, also PowerShell
• Experience working with various technologies and platforms such as AWS, Azure, O365, GCP, containers, etc.
• Proficiency with industry-standard testing tools such as Burp Suite, Metasploit, Nmap, Wireshark, Cobalt Strike, BloodHound, and the Kali Linux toolset

Why Should You Apply?

• Health Benefits
• Referral Program
• Excellent growth and advancement opportunities

Remote Benefits: 401K, Employee Referral Program, Life Insurance Skills: Amazon Web Services (AWS), Analysis Skills, Application Programming Interface (API), Architectural Analysis, Artificial Intelligence (AI), CISSP - Certified Information Systems Security Professional, Cloud Computing, Communication Skills, Computer Hacking, Computer Science, Computer Security, Customer Relations, Customer Satisfaction, DNS (Domain Name System), Detail Oriented, Documentation, English Language, Establish Priorities, Fuzz Testing, GCP (Good Clinical Practices), GPEN - GIAC Penetration Tester, Go Programming Language (Golang), HTTP (HyperText Transport Protocol), Health Plan, Industry Standards, Information Technology & Information Systems, Information/Data Security (InfoSec), Intelligence Analysis, Internet Application, Internet Security, Interpersonal Skills, Leadership, Linux Operating System, Metasploit, Microsoft Windows Azure, Microsoft Windows Operating System, Mobile Applications, Multiplatform/Cross-Platform, NMap, Network Protocols, Network Security, Organizational Skills, Penetration Testing, Presentation/Verbal Skills, Project/Program Management, Python Programming/Scripting Language, Quality Assurance, Quality Assurance Methodology, Risk, Risk Analysis, Scripting (Scripting Languages), Security Analysis, Security Attacks, Test Automation, Test Tools, Testing, Time Management, Vulnerability Scanners, Windows PowerShell, Wireshark (Ethereal), Writing Skills Iconma ICONMA is a global information consulting management firm providing Professional Staffing Services and Project-Based Solutions for organizations in a broad range of industries.

• Corporate Headquarters in Troy, Michigan; 20+ locations worldwide.
• Certified Woman-Owned Business Enterprise (WBE); certified by Women’s Business Enterprise National Council, National Women Business Owners Corporation (NWBOC); and California Public Utilities Commission (CPUC).
• Founded in 2000
• 2000+ Employees

The company was founded on the principle that success is derived from delivering high quality service and resources in the most responsive, flexible, and innovative way. ICONMA invests in people and resources with a single goal: To provide our customers with the highest quality service in the most responsive manner. Through its network of offices, ICONMA provides the resources to help clients maintain their competitive advantage. Company Size: 2,000 to 2,499 employees Industry: Management Consulting Services 2000 Website: https://www.iconma.com/ Apply To This Job