Freelance Penetration Tester for IT Infrastructure

We are seeking a highly skilled and experienced Freelance Penetration Tester to assess the security of our IT infrastructure. As a Penetration Tester, you will be responsible for identifying vulnerabilities and weaknesses in our systems, networks, and applications and providing recommendations for remediation.

Responsibilities:

- Conduct comprehensive penetration testing for our customers on-prem and cloud IT infrastructure and identify vulnerabilities and potential security risks.

- Utilize the MITRE ATT&CK framework to simulate real-world attack scenarios and assess the effectiveness of our security controls.

- Perform network and system reconnaissance to identify potential entry points and weaknesses.

- Conduct privilege escalation, lateral movement, and persistence testing to assess the overall security posture.

- Utilize tools such as Bloodhound, Mimikatz, ADRecon, and others to identify and exploit vulnerabilities.

- Document and report findings, including detailed descriptions of vulnerabilities, potential impact, and recommended remediation steps.

- Collaborate with customers' IT team to implement necessary security measures and ensure vulnerabilities are addressed.

- Stay up-to-date with the latest security trends, vulnerabilities, and attack techniques to continuously improve our security posture.

Requirements:

- Proven experience as a Penetration Tester, with a strong focus on IT infrastructure, including Cloud infrastructure such as Azure AD.

- In-depth knowledge of the MITRE ATT&CK framework and its application in penetration testing.

- Proficiency in using tools such as Bloodhound, Mimikatz, ADRecon, and others commonly used in penetration testing.

- Strong understanding of network protocols, operating systems, and security technologies.

- Familiarity with common vulnerabilities and attack vectors, as well as methods for their detection and exploitation.

- Excellent problem-solving and analytical skills, with the ability to think creatively and strategically.

- Strong written and verbal communication skills, with the ability to clearly document findings and communicate recommendations to technical and non-technical stakeholders.

- Relevant certifications such as OSCP, OSCE, or CISSP are highly desirable.

If you are a skilled Penetration Tester with a passion for uncovering security vulnerabilities and ensuring the integrity of IT infrastructure, we would love to hear from you. Please submit your resume and a brief summary of your relevant experience.