Penetration Tester

Runs penetration tests against the external networks, web applications and APIs of clients of Pathfynder by A-LIGN, the firm's offensive and defensive security services arm, reporting to the Director, Web Application & External Offensive Operations. The tester finds and manually exploits vulnerabilities, maps attack paths and their business impact, writes defensible reports with remediation advice, walks clients through findings, and helps improve the team's tools, methods and reporting while sharing knowledge with junior colleagues.

A-LIGN wants five to eight years of hands-on testing in external, web, API or mobile work, fluency with tools such as Burp Suite, Nmap and Nuclei, scripting ability, and preferably OSCP, OSWE or a comparable certification. Remote in the US.