Lead Penetration Tester

Linxx Global Solutions - Virginia Beach, VA

Part-time - Senior

Virginia Beach, VA

Administrative and Support Services

About the position

Linxx Global, Inc. (Linxx) is currently seeking an experienced Lead Penetration Tester for a part-time, independent contractor role. This individual will lead penetration testing efforts for various clients, identifying vulnerabilities and providing expert recommendations to improve security. You will manage testing engagements, deliver reports, and mentor junior testers as needed. This role requires someone who is self-motivated and capable of working independently. As a Lead Penetration Tester, you will be responsible for conducting thorough assessments of client networks, applications, and IT systems to identify potential security weaknesses. You will develop custom test plans and methodologies tailored to the specific requirements and environments of each client, ensuring that your testing aligns with industry standards such as OWASP, PCI DSS, and NIST. In addition to leading penetration tests, you will conduct red team exercises that simulate real-world attacks to evaluate the effectiveness of client defenses. Your role will also involve documenting findings, providing remediation guidance, and presenting security findings and recommendations to both technical and non-technical stakeholders. Staying up-to-date on the latest vulnerabilities, security tools, and techniques is crucial in this position, as is the ability to advise clients on improving their overall security posture based on the results of your tests. You will also have the opportunity to lead and mentor junior penetration testers, providing them with training and guidance to enhance their skills and knowledge in the field.

Responsibilities

• Lead penetration tests on client networks, applications, and IT systems.
• Develop custom test plans and methodologies based on client requirements and environments.
• Identify vulnerabilities, document findings, and provide remediation guidance.
• Conduct red team exercises to simulate real-world attacks and test client defenses.
• Lead and mentor junior penetration testers, providing training and guidance.
• Stay up-to-date on the latest vulnerabilities, security tools, and techniques.
• Present security findings and recommendations to both technical and non-technical stakeholders.
• Ensure testing aligns with industry standards (e.g., OWASP, PCI DSS, NIST).
• Advise clients on improving overall security posture based on test results.

Requirements

• 5+ years of experience in penetration testing and vulnerability assessments.
• Expertise with penetration testing tools like Metasploit, Burp Suite, Nmap, Nessus, etc.
• In-depth knowledge of network protocols, common vulnerabilities, and web application security.
• Certifications such as OSCP, GPEN, CEH are highly preferred.
• Strong scripting skills (Python, Bash) for automating security tasks.
• Experience with cloud environments (AWS, Azure, GCP) is a plus.
• Ability to work independently and manage multiple client projects.
• Excellent communication skills for presenting findings and recommendations to clients.
• Prior leadership or mentoring experience is a plus.

Benefits

• Comprehensive medical, dental, and vision insurance
• 401(k)
• Basic and voluntary life insurance
• Disability coverage
• Paid time off