TalentFish ยท 22 hours ago
Penetration Tester
TalentFish is casting a line for a Senior WEB/API Penetration Tester - Red Teamer. The role involves performing red team engagements, conducting endpoint evasion, and writing narrative-driven reports detailing attack paths and business impact.
Responsibilities
Perform red team engagements simulating real-world adversaries
Conduct endpoint evasion, privilege escalation, and lateral movement
Write narrative-driven reports detailing attack paths and business impact
Communicate findings effectively to technical and non-technical audiences
Develop custom scripts and tools when needed
Research and apply new TTPs in engagements
Collaborate with team members and contribute to knowledge sharing
Qualification
Required
8 Years plus WEB/API Pen Testing Experience in Consulting
Strong on either network or appsec, and passable on the other
Strong professionalism and speaking/writing skills, without overreliance on LLMs and with a willingness to get on video calls
Preferred
Consulting experience preferred, if you don't have it, be prepared to demonstrate how you make up for the gaps
Can demonstrate and discuss previous persistence on real-world tests chaining small findings into showing real impact
Have written tools, scripts, or PoCs when off-the-shelf options weren't enough
Experience with EDR evasion and C2 frameworks
Been part of CTFs, cons, local meetups, or have published write-ups
Certifications (Offensive Security, Zeropoint Security, SEKTOR7, etc.)
Some level of scripting/coding proficiency
Benefits
Health insurance
401(k)
Paid time off
Company
TalentFish
TalentFish is a staffing technology and operations services platform that offers co-employment and PEO services.