All open positions
Offensive Security
Penetration Tester
Remote (US / EU) · client sites as neededContract or W-2
You will join the offensive security team behind 200+ delivered penetration tests across 9+ industry sectors. Engagements range from web and API testing (OWASP WSTG, OWASP API Top 10) to external/internal infrastructure, Active Directory, Wi-Fi, and cloud reviews. You will work manually-first, backed by tooling, and report findings with CVSS scoring and a real-world exploitability assessment.
Prefer email? Send your CV to david.picha@integraus.com
What you will do
- Plan and execute penetration tests of web applications, APIs, networks, and wireless environments
- Perform reconnaissance, exploitation, privilege escalation, and post-exploitation within agreed rules of engagement
- Test Active Directory environments — attack-path mapping, NTLM/Kerberos attacks, privilege escalation to domain admin
- Write clear technical reports: findings, evidence, CVSS scoring, and practical remediation guidance
- Present results to client technical teams and support remediation retests
What we expect
- Proven hands-on penetration testing experience (professional engagements or demonstrable lab/CVE work)
- Strong knowledge of OWASP testing methodologies (WSTG, API Top 10, MASVS) and PTES/OSSTMM
- Solid networking and Active Directory fundamentals
- Ability to write professional reports in English
- Recognized certifications such as OSCP, OSWP, CRTO, CEH, or GIAC are a strong plus
Nice to have
- Mobile application testing experience (Android/iOS)
- Cloud security testing (AWS/Azure/GCP, CIS Benchmarks)
- Red team or social engineering engagement experience
Sounds like you?
Upload your CV right here and it goes straight to David Pícha. We reply to every application.
Prefer email? Send your CV to david.picha@integraus.com