<h4><strong>About the Role</strong></h4> <p>The Internal Penetration Tester works to execute offensive security activities for Pathfynder by A-LIGN. In this role, you will be responsible for the delivery of internal network and cloud-based SaaS penetration testing engagements. As the Internal Penetration Tester, you will provide exceptional technical and client-focused testing strategies to help support the continued growth of our fast-paced company. A-LIGN will depend on you as the Internal Penetration Tester to independently identify and validate real-world security risks, manually exploit vulnerabilities, document findings, and communicate practical remediation guidance to clients.</p> <h4><strong>Reports to</strong></h4> <p>Director, Internal Offensive Operations</p> <h4><strong>Pay Classification</strong></h4> <p>Full-Time, Exempt</p> <h4><strong>Responsibilities</strong></h4> <ul> <li><strong> </strong>Execute internal network and cloud-based SaaS penetration testing engagements</li> <li><strong> </strong>Identify, validate, and manually exploit vulnerabilities using public exploits, custom-developed exploits, or a combination of techniques</li> <li><strong> </strong>Evaluate findings in context, explore realistic attack paths, and accurately assess business and technical risk</li> <li><strong> </strong>Deliver clear, accurate, client-ready reports that explain findings, evidence, and actionable remediation guidance</li> <li><strong> </strong>Communicate technical issues, testing results, and remediation recommendations to client stakeholders</li> <li><strong> </strong>Maintain project quality and timelines while executing assigned engagements with minimal oversight</li> <li><strong> </strong>Collaborate with the offensive security team to evaluate industry tools, improve delivery methods, and share technical knowledge</li> <li><strong> </strong>Mentor team members and contribute to the continued development of team capabilities</li> </ul> <h4><strong>Minimum Qualifications</strong></h4> <p>EDUCATION</p> <ul> <li><strong> </strong>Degree in cybersecurity, computer information systems, related discipline or equivalent professional</li> </ul> <p>EXPERIENCE</p> <ul> <li><strong> </strong>5+ years of hands-on offensive security experience, including at least 3 years focused on internal network, Active Directory, red team, or purple team penetration testing</li> <li><strong> </strong>Experience with network and system exploitation across enterprise environments</li> <li><strong> </strong>Knowledge of penetration testing methodologies and current offensive security practices</li> <li><strong> </strong>Experience applying current tactics, techniques, and procedures related to EDR bypass, lateral movement, and privilege escalation</li> <li><strong> </strong>Preferred<strong> </strong>red team or purple team penetration testing experience</li> <li><strong> </strong>Preferred wireless penetration testing experience</li> <li>Preferred consulting or client-facing security delivery experience</li> </ul> <p>CERTIFICATIONS</p> <ul> <li><strong> </strong>Preferred OSCP, CEH, or OSEP certification.</li> <li><strong> </strong>Preferred additional advanced certifications relevant to internal network, Active Directory, red team, or cloud security testing</li> </ul> <p>SKILLS</p> <ul> <li><strong> </strong>Passion for information security and identifying exploitable vulnerabilities before threat actors can take advantage of them.</li> <li><strong> </strong>Ability to discover and exploit complex vulnerabilities while maintaining a disciplined and repeatable approach to testing.</li> <li><strong> </strong>Knowledge of Active Directory attack paths, network exploitation, lateral movement, privilege escalation, and defence evasion techniques.</li> <li><strong> </strong>Proficiency with scripting languages such as Python, Bash, JavaScript, PowerShell, or SQL.</li> <li><strong> </strong>Proficiency with commonly used offensive security tools such as Nmap, BloodHound, the Impacket suite, Metasploit, Wireshark, and Nessus.</li> <li><strong> </strong>Knowledge of multiple penetration testing concentrations and the ability to select appropriate methodologies and tools.</li> <li><strong> </strong>Ability to write clear, concise, client-ready reports with accurate findings and actionable remediation guidance.</li> <li><strong> </strong>Excellent verbal and written communication skills, with the ability to explain technical risks to technical and non-technical audiences.</li> <li><strong> </strong>Ability to work independently and collaboratively in a fast-paced, remote environment while meeting deadlines.</li> <li><strong> </strong>Continuous desire to grow technical capabilities, improve delivery efficiency, and share knowledge with team members and clients.</li> <li><strong> </strong>Cloud architecture knowledge across AWS, Microsoft Azure, or Google Cloud Platform is preferred.</li> </ul> <h4><strong>Benefits</strong></h4> <ul> <li>&