The senior penetration tester is responsible for hacking into authorized customer systems, obtaining a foothold, pivoting to other relevant systems, and obtaining important data for exfiltrationIn this role, you are required to follow the raxis methodology for testing, which includes ample screenshots with confidential data redacted, a narrative on how the attack was performed, and a detailed roadmap on how to resolve the security vulnerabilities usedProficiency required in hacking a wide range of targets, including web applications, mobile applications, file servers, or a large network of workstationsExpertise in physical social engineering and phishing techniques requiredWhile engagement time can vary based on scoping, a typical engagement requires 5 days to completeYou should be able to complete a 5 day test within the first 4 days, leaving the last day for reporting.
The raxis core pentest team is based in atlanta, however this position may be located anywhere in the usIn addition to pen-testing, the senior penetration tester may be required to perform general security consulting, perform vulnerability scans, and perform incident response analysis.
Job requirements
Strong business writing skills
Exceptional communication skills
Exceptional ability to operate vulnerability scanners such as nessus and nexpose
Strong technical proficiency in all major operating systems, especially linux and windows
Able to hack into web applications that are vulnerable to attacks such as sql injection and command execution
Able to gain domain administrator on a windows domain remotely if provided a working system level exploit on a test environment
Able to perform chained attacks, privilege escalation, and lateral movement techniques
Able to assess the security of communication and data storage used in mobile applications
Ability to operate metasploit, burp suite, crackmapexec, nmap, and many other hacking tools
Proficiency reading and writing shell scripts
Ability to extract user password hashes and operate hashcat in a proficient manner
Proficiency in networking and routing concepts
Expertise in creating phishing campaigns and performing physical social engineering to obtain system and building access as well as to gather critical documents and information
Access to reliable, high speed internet of at least 5mb downstream sustained and a quiet place to work
Must be able to travel up to 30%, however we are flexible with timing to balance personal events
