Principal Penetration Tester

About This Role

The Principal Penetration Tester spearheads the company's penetration testing initiatives, playing a crucial role in safeguarding critical digital infrastructure. This role suits a seasoned cybersecurity professional who is passionate about pushing the boundaries of cybersecurity and wants to join a team that is reshaping how organizations defend against modern threats.

Responsibilities

• Design and execute sophisticated penetration tests across complex networks, systems, and applications
• Craft compelling, actionable reports that translate technical findings into clear business impact
• Collaborate closely with clients to develop tailored remediation strategies that drive meaningful security improvements
• Push the boundaries of penetration testing innovation through research and development of novel TTPs
• Contribute to Altus Consulting's thought leadership efforts via publications, presentations, and industry forums
• Lead quality assurance initiatives for the suite of penetration testing services
• Engage in cross-functional collaboration to enhance overall security offerings
• Execute full-scale, assumed breach, and transparent/collaborative campaigns
• Develop, curate, and leverage offensive security tooling
• Manage and configure campaign infrastructure
• Research and develop attacks on vulnerable systems and defensive tooling (e.g., AntiVirus, EDR, XDR)
• Provide ongoing consulting to defense teams as they design and implement responses to campaign findings
• Leverage expertise in scripting, development, attack infrastructure, social engineering, and offensive security tooling to execute simulated attacks against clients' networks and subsidiaries spanning the globe

Requirements

• Degree in Computer Science, Computer Engineering, or a related technical field, or equivalent professional experience
• Relevant work history demonstrating hands-on experience in computer science/engineering principles
• Completed projects or certifications that align with technical requirements
• Demonstrated proficiency in key skills like programming languages, algorithms, software design, etc.
• Relevant coursework or training if transitioning from another field
• Programming languages like Python, Java, C++, Linux scripting
• Network and application security knowledge
• Familiarity with security assessment tools
• Threat modeling and cryptography skills
• Knowledge of operating systems (Windows, Linux, macOS)
• Experience with penetration testing frameworks and tools

Highly Valued Certifications:

• OSCP (Offensive Security Certified Professional)