Senior Penetration Tester

Unclassified - Austin, TX

Full-time - Senior

Remote - Austin, TX

About the position

Chaotic Good Information Security (CGIS) is seeking talented and driven Senior Penetration Testing Consultants to join our specialized team! We're an Austin, Texas based offensive security-focused firm, committed to delivering world class white-glove professional services. We assist companies looking for significant maturity shifts, necessitating quick responses and complex problem-solving. Ideal candidates for this role have significant experience delivering full scope assessments and a proven history of it. As a boutique consultancy, we offer significant flexibility in this role. We are currently experiencing significant growth and are looking to build the core of a highly technical, world class, and hacker-driven professional services team. In this role, you will conduct penetration testing on a dynamic range of customer systems, networks, and applications to identify vulnerabilities and assess security risks. You will be responsible for writing detailed reports outlining testing procedures, findings, and recommendations for remediation. Collaboration with internal teams to implement security measures and best practices is essential. Staying current on the latest cybersecurity trends, tools, and techniques is also a key part of this position. Additionally, you may assist with security incident response and remediation efforts as needed.

Responsibilities

• Conduct penetration testing on a dynamic range of customer systems, networks, and applications to identify vulnerabilities and assess security risks.
• Write detailed reports outlining testing procedures, findings, and recommendations for remediation.
• Collaborate with internal teams to implement security measures and best practices.
• Stay current on the latest cybersecurity trends, tools, and techniques.
• Assist with security incident response and remediation efforts as needed.

Requirements

• 5 years of experience in planning, conducting, and delivering web application or internal network penetration tests.
• At least 1 of the following: KLCP, OSCP, OSWP, OSEP, OSCE, OSWA, OSWE, or equivalent certifications.
• Expertise with modern cybersecurity risk frameworks (NIST, BSIMM, MITRE, etc.).
• Hands-on experience with common penetration testing tools such as Metasploit, Burp Suite, Nmap, PDTM, and tools typically found on a base Kali installation.
• Strong communication and problem-solving skills.
• Strong technical reporting and documentation skills.
• Ability to work independently and as part of a team.

Nice-to-haves

• Previous consulting experience at a services-oriented consultancy.
• Previous experience in CTF competitions or Hack The Box challenges.
• Active engagement on Bugcrowd, HackerOne, Intigriti, or other bug bounty and responsible disclosure programs.
• Previous conference speaking experience (OWASP/BSides/Defcon/Blackhat/etc.).
• Software development, scripting, and payload writing experience.

Benefits

• Remote first work/life balance.
• Commitment to professional development and active mentorship.
• Access to a wide variety of cybersecurity problems across numerous domains.
• Training reimbursement for role relevant certifications.