Penetration Tester (Ethical Hacker)

Job Description:

As a Penetration Tester (Ethical Hacker), you will identify and exploit vulnerabilities in systems and networks to strengthen security for portfolio companies and clients. This remote or New York, NY-based role (with access to a WeWork office) offers the opportunity to work with global teams, enabling you to simulate cyberattacks, uncover weaknesses, and recommend solutions to enhance security. You will play a key role in safeguarding digital assets and ensuring compliance with industry standards.

Job Responsibilities:

• Conduct penetration testing on systems, networks, and applications to identify vulnerabilities.
• Simulate cyberattacks to assess the effectiveness of security measures.
• Document and report findings, providing actionable recommendations to address weaknesses.
• Collaborate with internal teams to implement security improvements.
• Stay updated on emerging cybersecurity threats, tools, and techniques.
• Develop and maintain scripts and tools to automate testing processes.
• Ensure compliance with regulatory requirements and industry standards (e.g., GDPR, PCI-DSS).
• Provide training and guidance to employees on security best practices.

Job Requirements:

• Education: Bachelor’s degree in Cybersecurity, Information Technology, or a related field; equivalent experience accepted.
• Experience: 2+ years of experience in penetration testing or ethical hacking (open to less experienced candidates with strong potential).
• Skills:
  • Proficiency in penetration testing tools (e.g., Metasploit, Burp Suite, Nmap).
  • Strong knowledge of network protocols, operating systems, and application security.
  • Experience with scripting languages (e.g., Python, Bash, PowerShell).
  • Familiarity with regulatory requirements and industry standards (e.g., GDPR, PCI-DSS).
  • Excellent analytical and problem-solving abilities.
  • Strong communication and collaboration skills.
• Certifications: Relevant certifications (e.g., OSCP, CEH, GPEN) are a plus but not required.