Senior Penetration Tester

Icon
USA
Icon
Red Team
Icon
Full Time

Penetration Tester – Join Cybrella’s Elite Security Team

Are you passionate about ethical hacking and securing organizations from real-world threats? At Cybrella, we are looking for a Penetration Tester who thrives in offensive security, uncovering vulnerabilities, and delivering impactful security assessments to clients. If you have a hacker mindset and the technical expertise to back it up, we want you on our team!

Your Role at Cybrella

As a Penetration Tester, you will be responsible for leading and executing penetration testing engagements from start to finish. This includes scoping, testing, reporting, and presenting findings to clients in a clear and actionable manner. You will work closely with organizations to identify weaknesses, simulate real-world attacks, and strengthen security defenses.

What You’ll Do

  • Perform network, web, and mobile penetration testing, source code reviews, and social engineering assessments.
  • Develop and deliver comprehensive security reports for technical and executive audiences.
  • Communicate vulnerabilities, risks, and mitigation strategies to technical teams and C-level stakeholders.
  • Research and implement new attack techniques, tools, and methodologies to enhance Cybrella’s red teaming capabilities.
  • Assist with scoping engagements, leading penetration tests, and mentoring junior security professionals.
  • Stay ahead of emerging threats, vulnerabilities, and exploits to improve testing methodologies.

What We’re Looking For

We need someone who thinks like an attacker but works for the defenders. You should have a deep understanding of cybersecurity concepts, penetration testing methodologies, and the ability to adapt to evolving threats.

Must-Have Skills & Experience:
  • 3-7 years of hands-on penetration testing experience.
  • Strong knowledge of network penetration testing, mobile and web application security, and social engineering techniques.
  • Familiarity with attack tools, frameworks, and methodologies such as Metasploit, Burp Suite, Nmap, and Kali Linux.
  • Proficiency in scripting and automation using Python, Ruby, Bash, or PowerShell.
  • Deep understanding of network protocols, covert channels, and exploit development.
  • Experience in reverse engineering, malware analysis, and source code review for security flaws.
  • Mastery of Linux, Windows, and MacOS environments.
  • Strong communication skills with the ability to present findings to both technical and executive audiences.
Bonus Skills (Nice to Have):
  • Experience in red teaming, adversary simulation, or threat emulation.
  • Development experience in C#, .NET, Go, or Java.
  • Reverse engineering expertise, including obfuscators and ciphers.
  • Security certifications such as OSCP, OSCE, OSEP, GPEN, or CISSP

Why Cybrella?

At Cybrella, you’ll work on cutting-edge security projects, collaborate with top cybersecurity experts, and continuously push the boundaries of offensive security. We offer a dynamic, fast-paced environment where innovation, learning, and problem-solving are at the core of what we do.

If you’re ready to take on challenging penetration testing engagements and help organizations stay ahead of cyber threats, we’d love to hear from you!

Job Application
Use this Form to Apply for the Job
By Applying for this job, you agree to with our Privacy Policy.
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.

Why Cybrella

Cybrella stands out as your dedicated cybersecurity partner, focusing exclusively on cutting-edge, proactive cyber defense. We bring specialized domain expertise across IoT, mobile, cloud, applications, and data security both at rest and in motion alongside comprehensive fraud prevention. Our commitment lies in understanding your unique cyber landscape to design tailor-made solutions that address specific threats. With Cybrella, you gain a partner that collaborates closely to safeguard your enterprise and strengthen resilience against evolving digital risks.