We are looking for an experienced Penetration Tester to join our cybersecurity team and enhance the security of our Windows-based systems. The ideal candidate will play a key role in identifying vulnerabilities, conducting simulated attacks, and implementing strategies to safeguard critical infrastructure, including servers, endpoints, and Active Directory environments. This position offers an opportunity to apply advanced penetration testing techniques and collaborate with IT teams to strengthen security measures.
Responsibilities:
- Perform penetration tests and security evaluations of Windows environments, including Active Directory, servers, endpoints, and domain controllers.
- Execute red team scenarios to simulate real-world attack tactics, techniques, and procedures.
- Identify and exploit vulnerabilities within Windows systems, applications, and networks, documenting findings comprehensively.
- Develop and utilize custom scripts and tools using programming languages such as PowerShell, Python, C++, or C#.
- Work closely with IT teams to address security gaps and implement mitigation strategies.
- Prepare detailed reports outlining vulnerabilities and actionable recommendations to fortify Windows infrastructure.
- Stay updated on emerging threats, attack vectors, and techniques targeting Windows-based systems.
- Evaluate Group Policy Objects and other system configurations to ensure adherence to security standards.
- Support the improvement of cybersecurity practices by sharing insights and conducting knowledge transfer sessions.
- Demonstrated expertise in penetration testing, specifically focused on Windows systems and infrastructure.
- Advanced understanding of Active Directory architecture and common attack methods such as Kerberoasting and Pass-the-Hash.
- In-depth knowledge of Windows authentication mechanisms and privilege escalation techniques.
- Proficiency with tools like Metasploit, Cobalt Strike, BloodHound, Mimikatz, and CrackMapExec.
- Familiarity with Windows internals, including registry, processes, and memory management.
- Strong scripting and automation skills using PowerShell, Python, or Bash.
- Solid grasp of network protocols and their vulnerabilities.
- Excellent analytical and communication skills to translate technical findings into actionable solutions.