Senior Penetration Tester

Key Responsibilities: Perform penetration testing of applications, APIs, infrastructure, cloud environments, Active Directory, and other technology platforms. Identify vulnerabilities, attack paths, misconfigurations, and security weaknesses through manual testing and validation activities. Document findings with clear technical details, business impact, supporting evidence, and remediation recommendations. Retest remediated vulnerabilities and validate risk reduction efforts. Participate in discussions with application teams to explain findings and support remediation planning. Maintain testing documentation, workpapers, and evidence in accordance with internal security and compliance requirements. Collaborate with internal security teams, stakeholders, and third-party vendors to improve testing coverage and effectiveness. Stay current on emerging attack techniques, offensive security tools, and industry trends.

Required Qualifications: Minimum 5 years of hands-on penetration testing, offensive security, red team, or related cybersecurity experience. Experience conducting penetration testing of web applications, APIs, infrastructure, cloud environments, and Active Directory. Demonstrated ability to identify, exploit, validate, and clearly document security vulnerabilities. Strong understanding of common attack techniques, vulnerability assessment methodologies, and penetration testing frameworks. Experience creating professional penetration testing reports, including technical findings and remediation recommendations. Ability to independently manage multiple assessments and meet deadlines in a fast-paced environment. Strong written and verbal communication skills, including experience discussing findings with technical and non-technical stakeholders. Experience using industry-standard penetration testing tools and techniques. A Bachelor's Degree is preferred.

Preferred Qualifications: AI security testing experience. Mainframe security testing experience. Banking, financial services, or other highly regulated industry experience. Cloud security assessment experience (AWS, Azure, GCP).Advanced offensive security certifications (OSCP, OSEP, OSWE, OSED, GXPN, CPTS, etc.).Everforth Apex is a world-class IT services company that serves thousands of clients across the globe. When you join Everforth Apex, you become part of a team that values innovation, collaboration, and continuous learning. We offer quality career resources, training, certifications, development opportunities, and a comprehensive benefits package. Our commitment to excellence is reflected in many awards, including Clearly Rateds Best of Staffing in Talent Satisfaction in the United States and Great Place to Work in the United Kingdom and Mexico.