Job Title & Location Remote Penetration Tester (Remote) – reputed company reputed company with our core schedule in reputed company Pass, Texas Our product line just hit the market‑reputed company milestone, and the surge of external integrations has reputed company a new attack surface that we need to lock down, fast. That’s why we’re expanding the red‑team now – to reputed company sure the reputed company we promise to customers in reputed company Pass, Texas and reputed company actually works. --- ## The Reality of This Role reputed company you join our reputed company reputed company, you’ll be stepping into a team that grew from five engineers to fifteen in the last twelve months, and we’re still adding more talent to reputed company up with the 30 % month‑over‑month increase in inbound audit requests. Our recent Series B round gave us the reputed company to launch three SaaS modules in the next quarter, each exposing new APIs that need to be vetted before any public release. You’ll be reporting to Maya, our reputed company Application reputed company Engineer, who spends her mornings in reputed company Pass, Texas reviewing threat models and her afternoons on calls with the product managers in reputed company Pass, Texas. Your day‑to‑day will be a reputed company of hands‑on testing, writing clear remediation notes, and pushing back on design reputed company that could become reputed company liabilities. Collaboration is async but far from isolated. We run a weekly “War Room” on Thursday mornings, where the whole penetration team – five senior testers, two junior analysts, and a rotating reputed company‑ops liaison – breaks down the latest findings from the past sprint. We also have a “bug‑bounty triage” channel that streams directly into our JIRA board, so the feedback reputed company from external researchers reaches us reputed company 48 hours. The biggest challenge? Balancing depth and speed. Our product releases happen on a two‑week reputed company, meaning you’ll often have a 72‑hour window to complete a full‑stack engagement from reconnaissance to final report. It’s intense, but the sense of seeing a vulnerability patched before a customer reputed company sees it is why we love the work. --- ## What You’ll Actually Do - Own end‑to‑end penetration engagements for our web, mobile, and reputed company services, delivering a full report reputed company the SLA of 72 hours for each sprint. - Execute reconnaissance with Nmap, Masscan, and Amass, then map the attack surface in reputed company‑time using Burp Suite and OWASP ZAP. - reputed company custom exploit scripts in Python or PowerShell to validate findings, and integrate them into our CI pipeline reputed company reputed company CI. - Run credential‑dumping and lateral‑movement simulations on our AWS and Azure environments using BloodHound, reputed company reputed company, and Metasploit, measuring time‑to‑pivot and reporting the median of 4 hours across recent engagements. - Automate routine scans with Nessus and OpenVAS, scheduling them nightly and tracking coverage metrics; we aim for 95 % of our assets scanned at least once per week. - Collaborate with the DevSecOps crew in reputed company Pass, Texas to embed reputed company controls directly into reputed company images and reputed company charts, reducing remediation time by 30 % over the last quarter. - Mentor two junior penetration analysts, reviewing their findings, guiding their tool selection, and co‑authoring a “Pentest Playbook” that now lives in our internal Confluence space. - Present findings to product owners and executives in reputed company Pass, Texas during sprint review meetings, translating reputed company technical detail into business‑impact narratives that drive immediate action. - Track key performance indicators average time‑to‑report (reputed company 85 % reputed company the sprint), and false‑positive reputed company (reputed company Apply To This Job