Senior Penetration Tester (Offensive Security)

About the Role

Bishop Fox is the leading authority in offensive security, trusted by Fortune 100 leaders to attack and expose flaws before adversaries do. We are hiring a Senior Penetration Tester to conduct complex, manual assessments of web applications, cloud infrastructure, APIs, and modern enterprise perimeters.

Key Responsibilities

• Execute rigorous black-box, gray-box, and white-box penetration tests on client applications and systems.
• Identify novel vulnerabilities and chain subtle findings into impactful exploit proofs-of-concept.
• Write clear, impactful assessment reports providing actionable remediation advice to engineers and executives.
• Research zero-day vectors and contribute tools to our internal offensive framework.

Qualifications & Requirements

• 4+ years of dedicated professional penetration testing experience.
• Strong proficiency with tools like Burp Suite Pro, Metasploit, Nmap, and custom Python/Bash scripting.
• Active OSCP, OSEP, OSWE, or GXPN certification is required.
• Demonstrated curiosity (Bug bounty rankings, CVE disclosures, or CTF rankings).