Penetration Tester

RedStream Technology · New York

FULL TIME

Job Description

Cybersecurity – Penetration Tester

Contract role, onsite, Midtown NYC

RedStream Technology is searching for a Penetration Tester / Ethical Hacker for their client’s Information Security team. The Penetration Tester is responsible for strengthening the client’s cyber security posture through manual and automated penetration testing, red team engagements, and offensive security assessments. The scope of the position's responsibilities includes planning and executing tests across applications, networks, and infrastructure to uncover exploitable vulnerabilities and attack paths that may be present within multiple environments.

Job Description/Key Responsibilities

Plan and execute penetration tests across web applications, APIs, mobile apps, networks, cloud infrastructure (AWS/Azure/GCP), and internal systems

Perform manual exploitation and validation of vulnerabilities to eliminate false positives and uncover logic flaws automated tools miss

Design, configure, and run automated vulnerability scanning pipelines to accelerate coverage and consistency across engagements

Build and deploy AI-agent-driven testing workflows to accelerate reconnaissance, fuzzing, exploit chaining, and report generation

Ability to analyze the environment from a threat actor's perspective, including the skill to conduct prioritized identification of vulnerable assets, and then devise techniques to exploit potential attack paths

Identifies security risks, threats, misconfigurations and vulnerabilities of existing networks, systems, applications and develops solutions to remediate identified threats

Perform red team engagements simulating advanced persistent threat (APT) tactics, techniques, and procedures (TTPs)

Tracking and documenting testing activities and providing updates to leadership through executive summaries and in-depth technical reports

High performance skillset which not only understands the threat spaces as it relates to risks, but also able to meet the technical challenge of communicating this out to our client’s teams

3+ years of direct experience performing penetration testing / red teaming in an active corporate environment

Experience consuming and analyzing Cyber Threat Intelligence for actionable takeaways

Experience explaining testing objectives and findings in plain English and able to communicate associated risk

Reporting gaps in a meaningful way that addresses a business risk as well as providing technical solutions to the operations teams in remediation is key

Skills or experience required

This is not a beginner level position and requires comfort and experience with manual security work, low level functionality, web application functionality, IT security, and vulnerability and threat management

Minimum 3 years of experience in the practice of penetration testing / ethical hacking

Technical Skills

Demonstrated experience planning and executing penetration test and red team engagements

Comfort operating in terminal environments

Ability to analyze an architectural document and strategically probe accordingly

Working knowledge of common (HTTP, DNS, SMB, etc.) networking protocols

Familiar with operation of both Windows and Linux based systems

Proficient with cross platform scripting languages such as Python or Golang, also PowerShell

Experience working with various technologies and platforms such as AWS, Azure, O365, GCP, containers, etc.

Proficiency with industry-standard testing tools such as Burp Suite, Metasploit, Nmap, Wireshark, Cobalt Strike, BloodHound, and the Kali Linux toolset

Practical experience integrating AI/LLM-based agents or copilots into security testing workflows (e.g., AI-assisted recon, automated exploit suggestion, agentic fuzzing frameworks) to accelerate results

Understanding of current cyber threat landscape, the different tactics commonly used by adversaries and how one would exploit, chain, and report against similar attack paths

Desired Skills

Strong work ethic with attention to detail

Demonstrated analytical abilities

Attention to detail, verbal and written communication, initiative, and motivation to learn

Strong written/oral communication skills required along with desire and ability to communicate with business leaders through all levels of the organization

Self-motivated with excellent planning and organizational skills; and the ability to prioritize tasks to meet deadlines and effectively manage changing priorities

Refined interpersonal skills with the ability to liaise confidently and professionally with a diverse range of people

Professional customer orientation with a strong commitment to providing a high standard of customer satisfaction

Ability to deliver client-ready documentation and participate in relevant client meetings

Working understanding of project management principles, processes, and documentation

Able to work across teams effectively and efficiently

Preferred Education and Experience

Relevant industry standard certification(s) preferred: OSCP, other possibilities: OSCE, OSWE, GPEN, GXPN, CEH, CISSP

Bachelor's degree in information technology, Computer Science, Quality Assurance or equivalent

Company	RedStream Technology
Location	New York
Type	FULL TIME
Niche	Full-time

Explore 1M+ Live Opportunities.

Penetration Tester

Job Description

Reporting gaps in a meaningful way that addresses a business risk as well as providing technical solutions to the operations teams in remediation is keySkills or experience required

Technical Skills

Desired Skills

Reporting gaps in a meaningful way that addresses a business risk as well as providing technical solutions to the operations teams in remediation is key

Skills or experience required