Penetration Test Infra

• *Senior Infrastructure Penetration Tester / Infrastructure Security Consultant – Job Description**

• *Job Title:** Senior Infrastructure Penetration Tester

• *Experience:** 5\-10 Years (Senior) / 8\-12 Years (Lead)

• *Department:** Cyber Security / Offensive Security / Red Team

• *Role Summary**

We are seeking an experienced **Senior Infrastructure Penetration Tester** to perform security assessments, vulnerability exploitation, red team exercises, and infrastructure security testing across enterprise on\-premises, cloud, network, server, virtualization, and Active Directory environments.

The candidate should possess strong expertise in **Network Penetration Testing, Active Directory Security, Windows/Linux Security, Cloud Security, Red Team Operations, Vulnerability Assessment, Privilege Escalation, and Security Remediation Consulting** .

• *Key Responsibilities**

• *Infrastructure Penetration Testing**

• Perform internal and external network penetration testing.
• Conduct vulnerability assessments and security audits.
• Identify security weaknesses across servers, networks, endpoints, and infrastructure components.
• Validate vulnerabilities through controlled exploitation.
• Perform security assessments for hybrid cloud environments.

• *Active Directory Security Testing**

• Conduct Active Directory penetration testing.
• Identify privilege escalation paths and attack chains.
• Assess Kerberos, NTLM, LDAP, Group Policies, and Authentication Security.
• Evaluate Tier\-0 assets and privileged access security.
• Perform lateral movement assessments.

• *Tools**

• BloodHound
• PingCastle
• Mimikatz
• Impacket
• Rubeus
• PowerView

• *Network Penetration Testing**

• Assess routers, switches, firewalls, and network devices.
• Conduct internal and external attack simulations.
• Perform network enumeration and reconnaissance.
• Identify misconfigurations and insecure protocols.
• Assess firewall and segmentation controls.

• *Technologies**

• Cisco
• Palo Alto
• Fortinet
• Check Point
• F5
• Load Balancers
• VPN Technologies

• *Cloud Security Assessment**

• Perform security assessments of Azure and AWS environments.
• Validate IAM security configurations.
• Assess cloud networking and security controls.
• Review security posture and compliance gaps.
• Conduct privilege escalation testing in cloud environments.

• *Platforms**

• Microsoft Azure
• AWS
• Microsoft Entra ID
• AWS IAM
• Defender for Cloud

• *Operating System Security Testing**

• *Windows Security**

• Windows Server Security Assessment
• Active Directory Security Review
• Group Policy Review
• Privileged Access Assessment
• PowerShell Security

• *Linux Security**

• Linux hardening validation
• Privilege escalation testing
• Sudo configuration reviews
• SSH security reviews

• *Vulnerability Management**

• Conduct authenticated and unauthenticated scans.
• Validate vulnerabilities identified by scanning tools.
• Perform risk prioritization and remediation recommendations.
• Assist infrastructure teams in vulnerability closure.

• *Tools**

• Nessus
• Qualys
• Rapid7 InsightVM
• OpenVAS
• Nexpose

• *Red Team Activities**

• Execute red team simulations.
• Emulate real\-world threat actors.
• Test detection and response capabilities.
• Assess SOC monitoring effectiveness.
• Validate EDR/XDR security controls.

• *Security Platforms Exposure**

• Microsoft Defender for Endpoint
• CrowdStrike Falcon
• SentinelOne
• Microsoft Sentinel
• Splunk

• *Reporting \& Remediation**

• Develop executive and technical assessment reports.
• Present findings to security leadership and infrastructure teams.
• Provide actionable remediation recommendations.
• Support security improvement initiatives.
• Conduct security awareness sessions for technical teams.

• *Required Technical Skills**

• *Infrastructure \& Network Security**

• TCP/IP
• Routing \& Switching
• Firewalls
• VPN Technologies
• IDS/IPS
• Network Segmentation
• DNS, DHCP

• *Security Testing Tools**

• Burp Suite Professional
• Nmap
• Metasploit
• Nessus
• Qualys
• Wireshark
• BloodHound
• CrackMapExec
• Responder
• Impacket

• *Operating Systems**

• Windows Server
• Linux Administration
• Active Directory
• VMware
• Hyper\-V
• Citrix

• *Scripting**

• PowerShell
• Python
• Bash
• Automation Scripting

• *Cloud Security**

• Azure Security
• AWS Security
• IAM Security
• Entra ID
• Cloud Networking

• *Qualifications**

• Bachelor's Degree in Cyber Security, Computer Science, Information Technology, or related field.
• 5\-10 years of experience in Penetration Testing, Red Teaming, Security Assessments, or Cyber Security Engineering.
• Strong understanding of attack methodologies and security controls.
• Experience working with enterprise infrastructure environments.

• *Preferred Certifications**

• *Offensive Security**

• OSCP (Highly Preferred)
• OSCE
• OSEP
• CRTO (Certified Red Team Operator)
• CRTP (Certified Red Team Professional)

• *Security Certifications**

• CISSP
• CEH
• GPEN
• GWAPT
• GCIH
• CompTIA Security\+

• *Cloud Certifications**

• AZ\-500
• AWS Security Specialty

• *Key Competencies**

• Infrastructure Penetration Testing
• Active Directory Security
• Red Team Operations
• Network Security Assessments
• Vulnerability Management
• Exploitation Techniques
• Privilege Escalation
• Cloud Security Testing
• Security Architecture Review
• Technical Reporting
• Client \& Stakeholder Management

• *Ideal Candidate Profile (Senior Level)**

A security professional with **5\-10 years of experience** in **Infrastructure Penetration Testing, Active Directory Security, Windows/Linux Administration, Network Security, VMware/Citrix, Azure/AWS Security, Vulnerability Management, Red Teaming, and Security Consulting** . The candidate should be capable of independently leading enterprise security assessments, simulating advanced attack scenarios, validating security controls, and providing strategic remediation guidance to global clients.