Remote opportunity at
Align TechnologyInternal Penetration Tester
Pathfynder by A-LIGN is looking for an Internal Penetration Tester to execute offensive security assignments. The company provides offensive and defensive cybersecurity services as part of…
Career Tools
About This Role
Pathfynder by A-LIGN is looking for an Internal Penetration Tester to execute offensive security assignments. The company provides offensive and defensive cybersecurity services as part of A-LIGN, a compliance and security partner serving over 2,400 global enterprises and small businesses. In this capacity, the professional will independently perform cloud-based SaaS and internal network penetration testing. Reporting to the Director of Internal Offensive Operations, this full-time exempt remote position involves discovering…
Job Description
Pathfynder by A-LIGN is looking for an Internal Penetration Tester to execute offensive security assignments. The company provides offensive and defensive cybersecurity services as part of A-LIGN, a compliance and security partner serving over 2,400 global enterprises and small businesses. In this capacity, the professional will independently perform cloud-based SaaS and internal network penetration testing.
Reporting to the Director of Internal Offensive Operations, this full-time exempt remote position involves discovering real-world vulnerabilities, manually exploiting security flaws, analyzing business and technical risks, and delivering practical remediation guidance to clients. The role requires minimal oversight while managing project quality and schedules. Ideal candidates possess a strong background in offensive security, active directory testing, and client-facing communication, alongside a dedication to mentoring colleagues and improving internal delivery processes.
Responsibilities
- Conduct internal network and cloud-based SaaS penetration testing assessments
- Find, validate, and manually exploit vulnerabilities using custom or public exploits
- Contextualize evaluation findings to assess technical and business risks
- Produce clear and accurate client reports detailing evidence and remediation steps
- Present testing results and technical issues to client stakeholders
- Manage project timelines and maintain quality with minimal supervision
- Collaborate with the offensive team to evaluate security tools and share knowledge
- Mentor other team members and help build team capabilities
Requirements
- Minimum of 5 years of hands-on offensive security experience
- At least 3 years dedicated to red team, purple team, internal network, or Active Directory penetration testing
- Familiarity with enterprise-level network and system exploitation
- Understanding of current offensive security methods and testing frameworks
- Practical background with privilege escalation, lateral movement, and EDR bypass tactics
- Proficiency in scripting languages such as Python, Bash, JavaScript, PowerShell, or SQL
- Experience using standard security tools like Nmap, BloodHound, Metasploit, Wireshark, Nessus, and the Impacket suite
- Ability to communicate technical risks clearly to both technical and non-technical audiences
Qualifications
- Degree in cybersecurity, computer information systems, or a related field
- Preferred experience in wireless penetration testing, red teaming, or purple teaming
- Preferred background in client-facing security consulting
- Preferred certifications such as OSCP, CEH, OSEP, or advanced credentials in cloud security and Active Directory
- Familiarity with cloud architecture on AWS, Microsoft Azure, or Google Cloud Platform
Core Skills
Benefits
- Healthcare, dental, and vision insurance
- Employer-paid life and disability insurance
- Employee Assistance Program
- Pet insurance
- 401(k) plan with employer match
- Competitive bonus structure
- Technology allowance
- Certification reimbursement
- Personalized career coaching
- Generous paid time off
- Paid office closure from December 25 through January 1
- Vacation bonus
- Summer hours
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
Is this position remote?
Yes, the posting indicates that this role operates in a remote environment.
What is the employment type?
This is a full-time, exempt position.
What experience is required for this job?
Candidates must have at least five years of hands-on offensive security experience, with a minimum of three years focused on Active Directory, internal network, red team, or purple team penetration testing.
Does the posting list a salary?
The salary is not specified in the job posting.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.