Penetration Tester (Ethical Hacker) - 100% Remote
Our Client
Media & Entertainment company
- Remote
Job description
Our Customer is a leading global, diversified information, services and media company with more than 360 businesses. Its major interests include various financial services, medical information and services businesses, and lastly, ownership in cable television networks such as A&E, HISTORY, Lifetime and ESPN; 33 television stations; 24 daily and 52 weekly newspapers; digital services businesses; and nearly 250 magazines around the world.
We are seeking a Penetration Tester (Ethical Hacker) on a contract basis to support their business needs. This role is 100% remote.
Responsibilities:
- Plan and execute penetration tests across web applications, APIs, mobile apps, networks, cloud infrastructure (AWS/Azure/GCP), and internal systems
- Perform manual exploitation and validation of vulnerabilities to eliminate false positives and uncover logic flaws automated tools miss
- Design, configure, and run automated vulnerability scanning pipelines to accelerate coverage and consistency across engagements
- Build and deploy AI-agent-driven testing workflows to accelerate reconnaissance, fuzzing, exploit chaining, and report generation
- Ability to analyze the environment from a threat actor's perspective, including the skill to conduct prioritized identification of vulnerable assets, and then devise techniques to exploit potential attack paths
- Identifies security risks, threats, misconfigurations and vulnerabilities of existing networks, systems, applications and develops solutions to remediate identified threats
- Perform red team engagements simulating advanced persistent threat (APT) tactics, techniques, and procedures (TTPs)
- Tracking and documenting testing activities and providing updates to leadership through executive summaries and in-depth technical reports
- High performance skillset which not only understands the threat spaces as it relates to risks, but also able to meet the technical challenge of communicating this out to our teams
- 3+ years of direct experience performing penetration testing / red teaming in an active corporate environment
- Experience consuming and analyzing Cyber Threat Intelligence for actionable takeaways
- Experience explaining testing objectives and findings in plain English and able to communicate associated risk
- Reporting gaps in a meaningful way that addresses a business risk as well as providing technical solutions to the operations teams in remediation is key
- Relevant experience required
- Other duties as assigned
Skills or Experience Required:
- This is not a beginner level position and requires comfort and experience with manual security work, low level functionality, web application functionality, IT security, and vulnerability and threat management
- Minimum 3 years of experience in the practice of penetration testing / ethical hacking
Technical Skills
- Demonstrated experience planning and executing penetration test and red team engagements
- Comfort operating in terminal environments
- Ability to analyze an architectural document and strategically probe accordingly
- Working knowledge of common (HTTP, DNS, SMB, etc.) networking protocols
- Familiar with operation of both Windows and Linux based systems
- Proficient with cross platform scripting languages such as Python or Golang, also PowerShell
- Experience working with various technologies and platforms such as AWS, Azure, O365, GCP, containers, etc.
- Proficiency with industry-standard testing tools such as Burp Suite, Metasploit, Nmap, Wireshark, Cobalt Strike, BloodHound, and the Kali Linux toolset
- Practical experience integrating AI/LLM-based agents or copilots into security testing workflows (e.g., AI-assisted recon, automated exploit suggestion, agentic fuzzing frameworks) to accelerate results
- Understanding of current cyber threat landscape, the different tactics commonly used by adversaries and how one would exploit, chain, and report against similar attack paths
Desired Skills
- Strong work ethic with attention to detail
- Demonstrated analytical abilities
- Attention to detail, verbal and written communication, initiative, and motivation to learn
- Strong written/oral communication skills required along with desire and ability to communicate with business leaders through all levels of the organization
- Self-motivated with excellent planning and organizational skills; and the ability to prioritize tasks to meet deadlines and effectively manage changing priorities
- Refined interpersonal skills with the ability to liaise confidently and professionally with a diverse range of people
- Professional customer orientation with a strong commitment to providing a high standard of customer satisfaction
- Ability to deliver client-ready documentation and participate in relevant client meetings
- Working understanding of project management principles, processes, and documentation
- Able to work across teams effectively and efficiently
Preferred Education and Experience
- Relevant industry standard certification(s) preferred: OSCP, other possibilities: OSCE, OSWE, GPEN, GXPN, CEH, CISSP
- Bachelor's degree in information technology, Computer Science, Quality Assurance or equivalent
We offer a competitive salary range for this position. Most candidates who join our team are hired at the median of this range, ensuring fair and equitable compensation based on experience and qualifications.
Perks are available through our 3rd Party Employer of Record (Available upon completion of waiting period for eligible engagements) Benefits include: Medical, Dental, and 401k (no match)
Please note: In order to to create a safe, productive work environment, our client is requiring all contractors who plan to be onsite to be fully vaccinated according to the CDC guidelines. Prior to coming into our offices, contractors will be required to attest that they are fully vaccinated.
An Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against on the basis of disability.
All applicants applying for U.S. job openings must be legally authorized to work in the United States and are required to have U.S. residency at the time of application.
If you are a person with a disability needing assistance with the application, or at any point in the hiring process, please contact us at support@themomproject.com.