Sr. Penetration Tester

Gulf Coast Automation Group•Chicago, IL

11h•$140,000 - $160,000•Remote

About The Position

TalentFish is casting a line for a Sr. Cybersecurity Penetration Tester. This is a direct hire, fully remote role. The reason this position exists is to design, execute, and mature an enterprise adversarial testing and red team program that proactively identifies vulnerabilities across network, application, cloud, and infrastructure environments. This role plays a critical part in communicating security risk to technical and executive stakeholders while shaping long-term remediation strategies and the future growth of the penetration testing function.

Requirements

Bachelor's degree in Information Security, Computer Science, Information Technology, or a related field
5+ years of hands-on penetration testing or red team experience
Experience building, expanding, or maturing a penetration testing or adversarial testing program
Strong understanding of healthcare security standards and frameworks, including HIPAA and NIST
Strong written and verbal communication skills with the ability to clearly articulate risk to technical and executive audiences
Relevant certifications such as CEH, Pentest+, GPEN, and/or OSCP preferred
This role requires authorization to work in the U.S. without current or future visa sponsorship.
All offers are contingent upon the completion of a background check, which may include but is not limited to reference checks, education verification, employment verification, drug testing, criminal records checks, and any required certifications or compliance requirements based on the end client's background check policies and applicable laws.

Nice To Haves

Master's degree preferred
Academic medical center or healthcare consulting experience strongly preferred

Responsibilities

Research, plan, and execute comprehensive penetration testing and red team operations across network, application, cloud, and infrastructure environments (40%)
Identify and validate security vulnerabilities, exploits, and weaknesses in security controls
Develop and maintain adversarial testing methodologies, playbooks, and procedures (20%)
Conduct manual and automated network and security architecture reviews and advise on best practices (15%)
Partner with IT and security teams to develop remediation recommendations and mitigation strategies (10%)
Communicate findings, risks, and recommendations to IT leaders, engineers, and business stakeholders (10%)
Support the growth and maturity of the penetration testing program, including mentoring and leading future team members
Stay current on emerging threats, attack techniques, and industry best practices
Perform other duties as assigned (5%)