Mid-to-Senior Penetration Tester - Remote - Part-Time

1w1 week ago

ClearFocus Technologies

Washington, US · Full-time · $150,000 – $220,000

About this role

We are seeking a mid-to-senior level penetration tester to support an upcoming engagement. This hands-on role involves contributing remotely and onsite as part of a collaborative team. The scope emphasizes enterprise infrastructure, including Windows/Active Directory environments, Linux systems, and network-layer testing.

Daily activities include performing hands-on penetration testing across Windows, Active Directory, Linux, and network environments. You will identify, exploit, and document vulnerabilities while conducting Active Directory attack path analysis for privilege escalation, lateral movement, and persistence. Clear, actionable documentation of findings with risk and remediation guidance is essential.

Collaboration with team members occurs during testing operations, including deconflict activities as needed. Support remote testing leading up to onsite engagements, then participate onsite during scheduled weeks in Richland, Washington. Onsite requirements are limited to one week in June and one week in July.

This part-time, flexible role aligns hours to project milestones with immediate remote start. No clearance is required, though Secret is preferred. Gain exposure to federal or national laboratory environments through this targeted assessment.

Requirements

5 years of experience in penetration testing, red teaming, or offensive security
Strong hands-on experience with Windows and Active Directory exploitation
Strong hands-on experience with Linux systems
Strong hands-on experience with network penetration testing
Proficiency with common offensive security tools and frameworks (e.g., C2 frameworks, AD enumeration tools, exploitation toolkits)
Experience with Vulnerability Research and Reverse Engineering
Experience with Exploit Development, Fault Injection, and Embedded Systems
Familiarity with tools: IDA Pro, Radare, Ghidra, Binary Ninja, OllyDbg, Lauterbach, jtagulator, Segger J-Link

Responsibilities

Perform hands-on penetration testing across Windows, Active Directory, Linux, and network environments
Identify, exploit, and document vulnerabilities in enterprise infrastructure
Conduct Active Directory attack path analysis (privilege escalation, lateral movement, persistence)
Collaborate with team members during testing operations and deconflict activities as needed
Provide clear, actionable documentation of findings, including risk and remediation guidance
Support remote testing activities leading up to onsite engagements
Participate in onsite testing during scheduled engagement weeks