Penetration Tester - Infrastructure & Red Team (Texas/Florida)

Packetlabs was built by an ethical hacker after seeing vulnerability assessments presented as penetration tests. Our slogan "Identify Risks Before They Become Headlines" drives at the importance of not providing our clients with a false sense of security.

We are a passionate team of highly trained, proactive ethical hackers. We provide expert-level penetration testing services that are thorough and tailored to help foster a safe digital space where everyone has the right to privacy and security. Packetlabs consultants find weaknesses others overlook and continuously learn new ways to evade controls. We hold ourselves to a very high standard.

To do so, weonlyhire individuals with the same drive and passion.

The Ethical Hacker – Infrastructure & Red Team is responsible for planning, executing, and reporting on infrastructure penetration testing, cloud security assessments, Active Directory security assessments, and adversary simulation engagements. The role evaluates the effectiveness of client security controls by identifying, validating, and demonstrating exploitable security vulnerabilities across enterprise infrastructure using industry-recognized offensive security methodologies.

Working independently and collaboratively with other security consultants, the Ethical Hacker performs offensive security assessments across on-premises, hybrid, and cloud environments while contributing to red team operations, purple team exercises, and advanced security testing engagements. The role provides technical guidance to clients through detailed reporting and presentations while contributing to the continuous improvement of Packetlabs' offensive security methodologies, tooling, and service offerings.

Who we are looking for

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related discipline; equivalent practical experience will be considered.
• Minimum of 3 years of professional experience performing infrastructure penetration testing, red teaming, adversary simulation, or offensive security consulting.
• Demonstrated experience conducting penetration testing across enterprise infrastructure, including Windows, Linux, Active Directory, Microsoft Entra ID, cloud platforms, and enterprise networking.
• Experience performing internal and external network penetration testing, privilege escalation, Active Directory security assessments, and lateral movement testing.
• Experience assessing cloud environments, including AWS, Microsoft Azure, or Google Cloud Platform.
• Strong understanding of enterprise networking, authentication technologies, identity management, cloud security, and offensive security methodologies.
• Experience using industry-standard offensive security frameworks, tools, and tradecraft.
• Excellent technical writing, presentation, and communication skills, with the ability to communicate findings to both technical and executive stakeholders.
• Industry certifications such as OSCP, OSEP, CRTO, CRTE, CARTP, CARTA, CREST CRT, CREST CCT, PNPT, GPEN, GXPN, or equivalent are considered an asset. OSCP or equivalent demonstrated technical capability is strongly preferred.
• Experience participating in Red Team, Purple Team, adversary simulation, or threat emulation engagements is considered an asset.
• Customer-first mentality. You are a great communicator with clients, project managers, and teammates. Rapid responses and on time.
• You deliver work that you take pride in. Your work is an autograph of your excellence.
• You dig deeper into every finding. Doesn't stop until impact is proven.
• You are comfortable being uncomfortable. Goes towards obstacles, not away from them. Consulting isn't your typical job and requires adapting to rapidly changing environments.
• You are always learning. Cybersecurity is changing every day, and you need to keep up or want to keep up. Be deeply aware of your skillset and be willing to improve.
• You are self-motivated and dependable.
• You are humble. Egos don't have a place at Packetlabs.

What you’ll be doing

- Infrastructure Security Assessments
-
- Plan and execute infrastructure penetration testing engagements across on-premises, hybrid, cloud, wireless, and enterprise network environments.
- Perform internal and external network penetration testing to identify, validate, and exploit security vulnerabilities using manual testing methodologies and industry-standard offensive security tools.
- Assess enterprise technologies including Active Directory, Microsoft Entra ID (Azure AD), Windows and Linux environments, virtualization platforms, cloud services, and supporting infrastructure.
- Evaluate cloud environments including AWS, Microsoft Azure, and Google Cloud Platform to identify configuration weaknesses, privilege escalation opportunities, identity risks, and cloud security vulnerabilities.
- Assess containerized environments, Kubernetes platforms, CI/CD pipelines, and cloud-native technologies where applicable.
- Red Team & Adversary Simulation
-
- Participate in and lead adversary simulation, red team, and objective-based security engagements in accordance with established methodologies and client objectives.
- Execute offensive security operations across the attack lifecycle, including reconnaissance, initial access, persistence, privilege escalation, credential access, lateral movement, defense evasion, command and control, and objective execution.
- Support purple team engagements by working collaboratively with defensive teams to validate detections, improve monitoring capabilities, and strengthen defensive controls.
- Develop and execute attack scenarios that demonstrate realistic business impact while maintaining client system integrity.
- Client Delivery & Reporting
-
- Prepare comprehensive technical reports that clearly communicate vulnerabilities, attack paths, business impact, risk ratings, and remediation recommendations.
- Present assessment findings to technical teams, executive stakeholders,…