No 3rd Party Recruiters

We are seeking a skilled and motivated Penetration Tester to join our team and play a key role in delivering our penetration testing services. In this client-facing role, you will simulate real-world cyberattacks on client networks, applications, cloud environments, and infrastructure to uncover security weaknesses, provide actionable recommendations, and help organizations strengthen their defenses.

You will work closely with clients, account managers, and our Cybersecurity Engineers team to scope engagements, execute tests safely and ethically, and deliver clear, high-impact reports that drive remediation and risk reduction.

Key Responsibilities

Plan, scope, and execute penetration tests (internal, external, web application, mobile, wireless, cloud, and social engineering) for MSP clients across various industries
Perform manual and automated vulnerability assessments using industry-standard tools and custom techniques
Identify, exploit, and document security vulnerabilities, misconfigurations, and business logic flaws
Simulate advanced attack scenarios, including lateral movement, privilege escalation, and persistence techniques in Windows, Linux, and hybrid environments
Conduct testing in accordance with recognized methodologies (e.g., OWASP, PTES, OSSTMM, NIST) and client-specific rules of engagement
Produce detailed, professional reports with executive summaries, technical findings, risk ratings, evidence, and prioritized remediation recommendations
Stay current with emerging threats, attack vectors, new vulnerabilities (CVEs), and penetration testing techniques

Required Qualifications

3+ years of hands-on penetration testing or related red team / ethical hacking experience
Deep understanding of common vulnerabilities (OWASP Top 10, CWE Top 25) and exploitation techniques
Experience writing clear, professional technical reports and communicating findings to both technical and non-technical audiences
Strong understanding of ethical guidelines and legal requirements for penetration testing
Excellent problem-solving skills, attention to detail, and ability to work independently on client engagements

Preferred Qualifications

Relevant certifications such as:
Offensive Security Certified Professional (OSCP) – highly preferred
CompTIA PenTest+
GIAC Penetration Tester (GPEN)
Certified Ethical Hacker (CEH)
Or other advanced certs (e.g., OSCE, OSEP, CRTP, PNPT)
Experience testing in MSP or client-service environments (multi-tenant awareness, scoped engagements)
Knowledge of compliance frameworks (PCI DSS, HIPAA, SOC 2, NIST 800-53, ISO 27001)
Experience with cloud penetration testing, API testing, or red team operations
Active participation in bug bounty programs, CTFs, or security research

Ridge IT Cyber

Latest Jobs

Penetration Tester