Penetration Tester

About the Company

Sprocket Security prioritizes offensive security for enterprises, empowering them to build robust defense strategies based on individual business risk through an expert-driven Continuous Penetration Testing platform.

Responsibilities

• Perform web application, network, and wireless testing across a diverse client base
• Discover newly exploitable systems and build payloads/C2 infrastructure that evades defenses
• Mimic real-world adversary tactics, techniques, and procedures (TTPs)
• Build scripts, tooling, or templates using Ruby, Python, PowerShell, C#, or Bash to improve efficiency
• Manage project lifecycles, including kickoff calls and professional client debriefs
• Work with development teams to migrate human-driven tasks into automation using AWS, Azure, Terraform, and Ansible

Requirements

• Three or more years of hands-on penetration testing experience
• One or more years of hands-on web application penetration testing experience
• Detailed knowledge of identifying and exploiting vulnerabilities in Windows, Linux, and cloud-based systems
• Programming experience in Ruby, Python, or Bash
• One publicly available contribution to the security community (e.g., GitHub, blog, research, or conference talk)
• Clear and concise verbal and written communication skills
• Must be a United States resident

Preferred Qualifications

• OSCP or equivalent skills-based certification (or ability to obtain within 12 months)
• Adversary Simulation experience
• Industry involvement through research, open-source projects, or public speaking
• Experience managing security projects or teams; CISSP certification is a bonus

Benefits

• Unlimited and mandatory PTO
• Company matched 401k with immediate eligibility
• 75% company contribution for employee health insurance and 50% for dependents
• 100% company contribution for dental and vision
• Flexible working hours
• Hardware and tools of your choice
• Support for career development including paid training, conferences, and certifications