Senior Infrastructure Penetration Tester / Infrastructure Security Consultant – Job Description
Job Title: Senior Infrastructure Penetration Tester
Experience: 5-10 Years (Senior) / 8-12 Years (Lead)
Department: Cyber Security / Offensive Security / Red Team
Role Summary
We are seeking an experienced Senior Infrastructure Penetration Tester to perform security assessments, vulnerability exploitation, red team exercises, and infrastructure security testing across enterprise on-premises, cloud, network, server, virtualization, and Active Directory environments.
The candidate should possess strong expertise in Network Penetration Testing, Active Directory Security, Windows/Linux Security, Cloud Security, Red Team Operations, Vulnerability Assessment, Privilege Escalation, and Security Remediation Consulting .
Key Responsibilities
Infrastructure Penetration Testing
- Perform internal and external network penetration testing.
- Conduct vulnerability assessments and security audits.
- Identify security weaknesses across servers, networks, endpoints, and infrastructure components.
- Validate vulnerabilities through controlled exploitation.
- Perform security assessments for hybrid cloud environments.
Active Directory Security Testing
- Conduct Active Directory penetration testing.
- Identify privilege escalation paths and attack chains.
- Assess Kerberos, NTLM, LDAP, Group Policies, and Authentication Security.
- Evaluate Tier-0 assets and privileged access security.
- Perform lateral movement assessments.
Tools
- BloodHound
- PingCastle
- Mimikatz
- Impacket
- Rubeus
- PowerView
Network Penetration Testing
- Assess routers, switches, firewalls, and network devices.
- Conduct internal and external attack simulations.
- Perform network enumeration and reconnaissance.
- Identify misconfigurations and insecure protocols.
- Assess firewall and segmentation controls.
Technologies
- Cisco
- Palo Alto
- Fortinet
- Check Point
- F5
- Load Balancers
- VPN Technologies
Cloud Security Assessment
- Perform security assessments of Azure and AWS environments.
- Validate IAM security configurations.
- Assess cloud networking and security controls.
- Review security posture and compliance gaps.
- Conduct privilege escalation testing in cloud environments.
Platforms
- Microsoft Azure
- AWS
- Microsoft Entra ID
- AWS IAM
- Defender for Cloud
Operating System Security Testing
Windows Security
- Windows Server Security Assessment
- Active Directory Security Review
- Group Policy Review
- Privileged Access Assessment
- PowerShell Security
Linux Security
- Linux hardening validation
- Privilege escalation testing
- Sudo configuration reviews
- SSH security reviews
Vulnerability Management
- Conduct authenticated and unauthenticated scans.
- Validate vulnerabilities identified by scanning tools.
- Perform risk prioritization and remediation recommendations.
- Assist infrastructure teams in vulnerability closure.
Tools
- Nessus
- Qualys
- Rapid7 InsightVM
- OpenVAS
- Nexpose
Red Team Activities
- Execute red team simulations.
- Emulate real-world threat actors.
- Test detection and response capabilities.
- Assess SOC monitoring effectiveness.
- Validate EDR/XDR security controls.
Security Platforms Exposure
- Microsoft Defender for Endpoint
- CrowdStrike Falcon
- SentinelOne
- Microsoft Sentinel
- Splunk
Reporting & Remediation
- Develop executive and technical assessment reports.
- Present findings to security leadership and infrastructure teams.
- Provide actionable remediation recommendations.
- Support security improvement initiatives.
- Conduct security awareness sessions for technical teams.
Required Technical Skills
Infrastructure & Network Security
- TCP/IP
- Routing & Switching
- Firewalls
- VPN Technologies
- IDS/IPS
- Network Segmentation
- DNS, DHCP
Security Testing Tools
- Burp Suite Professional
- Nmap
- Metasploit
- Nessus
- Qualys
- Wireshark
- BloodHound
- CrackMapExec
- Responder
- Impacket
Operating Systems
- Windows Server
- Linux Administration
- Active Directory
- VMware
- Hyper-V
- Citrix
Scripting
- PowerShell
- Python
- Bash
- Automation Scripting
Cloud Security
- Azure Security
- AWS Security
- IAM Security
- Entra ID
- Cloud Networking
Qualifications
- Bachelor's Degree in Cyber Security, Computer Science, Information Technology, or related field.
- 5-10 years of experience in Penetration Testing, Red Teaming, Security Assessments, or Cyber Security Engineering.
- Strong understanding of attack methodologies and security controls.
- Experience working with enterprise infrastructure environments.
Preferred Certifications
Offensive Security
- OSCP (Highly Preferred)
- OSCE
- OSEP
- CRTO (Certified Red Team Operator)
- CRTP (Certified Red Team Professional)
Security Certifications
- CISSP
- CEH
- GPEN
- GWAPT
- GCIH
- CompTIA Security+
Cloud Certifications
- AZ-500
- AWS Security Specialty
Key Competencies
- Infrastructure Penetration Testing
- Active Directory Security
- Red Team Operations
- Network Security Assessments
- Vulnerability Management
- Exploitation Techniques
- Privilege Escalation
- Cloud Security Testing
- Security Architecture Review
- Technical Reporting
- Client & Stakeholder Management
Ideal Candidate Profile (Senior Level)
A security professional with 5-10 years of experience in Infrastructure Penetration Testing, Active Directory Security, Windows/Linux Administration, Network Security, VMware/Citrix, Azure/AWS Security, Vulnerability Management, Red Teaming, and Security Consulting . The candidate should be capable of independently leading enterprise security assessments, simulating advanced attack scenarios, validating security controls, and providing strategic remediation guidance to global clients.
