Qureos Mentor

ICE Consulting - Managed IT & Cybersecurity for Life Sciences

<div>
 
 Job Overview
 
 
 
 We are looking for a motivated and skilled
 
 Penetration Tester with
 
 hands-on experience in
 
 Active Directory, Network, and Web Application penetration testing
 
 . The ideal candidate should be able to identify security vulnerabilities, misconfigurations, and weaknesses across enterprise environments and provide actionable recommendations to improve the organization's security posture.
 
 
 In addition to traditional penetration testing, the candidate will participate in purple-team
 
 exercises
 
 , collaborating with defensive teams to simulate real-world attack scenarios and strengthen detection and response capabilities. An interest in
 
 SOC operations, monitoring, and threat detection
 
 will be considered a strong advantage.
 
 
 
 Key Responsibilities
 
 
 
 <ul>
 <li>
 Perform Active Directory penetration testing to identify privilege escalation paths, insecure configurations, and potential lateral movement opportunities
 </li>
 <li>
 Conduct internal and external network penetration tests to identify vulnerabilities and weaknesses within the enterprise infrastructure
 </li>
 <li>
 Perform web application penetration testing, including authentication testing, input validation, session management, and business logic testing
 </li>
 <li>
 Identify and analyze security misconfigurations across systems, services, and network infrastructure
 </li>
 <li>
 Conduct security audits and configuration reviews to identify gaps against security best practices and industry standards
 </li>
 <li>
 Perform risk assessments by evaluating vulnerabilities, misconfigurations, and their potential business impact
 </li>
 <li>
 Document security findings, misconfigurations, and vulnerabilities with clear risk ratings and remediation guidance
 </li>
 <li>
 Participate in purple team engagements by simulating attacker techniques and helping SOC teams improve detection and response capabilities
 </li>
 <li>
 Support threat simulation exercises based on real-world attack techniques and frameworks such as MITRE ATT&amp;CK
 </li>
 <li>
 Work closely with SOC and defensive teams to improve alerting, monitoring, and threat detection use cases
 </li>
 <li>
 Assist in validating remediation efforts by performing retesting and verification of fixes
 </li>
 <li>
 Prepare technical and executive-level reports summarizing findings, risks, and recommended mitigation strategies
 
 
 </li>
 </ul>
 
 Requirements
 
 
 
 
 Required Skills &amp; Experience
 
 
 
 <ul>
 <li>
 Hands-on experience in Active Directory security assessments and penetration testing
 </li>
 <li>
 Strong knowledge of network penetration testing methodologies
 </li>
 <li>
 Experience in web application security testing (OWASP Top 10)
 </li>
 <li>
 Understanding of security configuration reviews and misconfiguration analysis
 </li>
 <li>
 Experience performing vulnerability validation and risk analysis
 </li>
 <li>
 Hands-on experience with tools such as:
 </li>
 <li>
 Nmap
 </li>
 <li>
 Burp Suite
 </li>
 <li>
 Metasploit
 </li>
 <li>
 BloodHound
 </li>
 <li>
 Impacket
 </li>
 <li>
 CrackMapExec
 </li>
 <li>
 Strong understanding of Windows security architecture and AD attack techniques
 </li>
 <li>
 Knowledge of network protocols, authentication mechanisms, and common attack vectors
 
 
 </li>
 </ul>
 
 Nice to Have
 
 
 
 <ul>
 <li>
 Experience with Purple Team exercises
 </li>
 <li>
 Exposure to SOC operations, SIEM platforms, or security monitoring
 </li>
 <li>
 Familiarity with MITRE ATT&amp;CK framework
 </li>
 <li>
 Scripting knowledge (Python, PowerShell, Bash)
 </li>
 <li>
 Exposure to cloud security assessments (Azure / AWS)
 
 
 </li>
 </ul>
 
 Preferred Certifications (Optional)
 
 
 
 <ul>
 <li>
 PNPT
 </li>
 <li>
 eCPPT
 </li>
 <li>
 GPEN / GWAPT
 
 
 </li>
 </ul>
 
 Soft Skills
 
 
 
 <ul>
 <li>
 Strong analytical and problem-solving mindset
 </li>
 <li>
 Ability to clearly communicate technical risks and remediation steps
 </li>
 <li>
 Good documentation and reporting skills
 </li>
 <li>
 Ability to collaborate with both offensive and defensive security teams
 </li>
 <li>
 Strong curiosity and passion for continuous learning in cybersecurity
 </li>
 </ul>
</div>

Penetration Tester

Join ICE Consulting - Managed IT & Cybersecurity for Life Sciences and explore 1   exciting career opportunities. They're hiring for various roles with options for remote or on-site work. Apply today and become part of their innovative team.

ICE Consulting - Managed IT & Cybersecurity for Life Sciences

About Company

Penetration Tester