Red Team Pentester

NXP USA INC.

3+ years hands-on penetration testing experience
Web application and api vulnerability assessment
Active directory exploitation techniques
The role involves assessing the security posture of web applications, networks, cloud platforms, and internal infrastructures through realistic attack simulations

Job Summary

  • The role involves assessing the security posture of web applications, networks, cloud platforms, and internal infrastructures through realistic attack simulations.
  • Candidates will execute adversary-style attack chains including lateral movement, privilege escalation, and Active Directory abuse to identify vulnerabilities.
  • The position requires producing high-quality reports that translate technical findings into clear business impact for both engineering and management teams.

Matching Summary

The role involves assessing the security posture of web applications, networks, cloud platforms, and internal infrastructures through realistic attack simulations.

Skills & Requirements

Must-have

  • 3+ years hands-on penetration testing experience
  • Web application and API vulnerability assessment
  • Active Directory exploitation techniques
  • Cloud environment security assessment AWS Azure GCP
  • Manual testing beyond automated scanners
  • Source code review capabilities
  • Proficiency with Burp Suite Nmap Metasploit

Nice-to-have

  • Red Team adversary simulation experience
  • EDR/AV evasion techniques in lab settings
  • Threat modeling and attack path analysis
  • Strong verbal and written communication skills
  • Self-driven and proactive mindset
  • Experience with Java C# Python JavaScript code review

Key Requirements

  • 3+ years of offensive security experience
  • OSCP or PNPT certification preferred
  • CRTO or OSWE certification preferred
  • US work authorization status required (implied by location context)
  • Strong reporting and presentation skills

Work Rights

Not specified

Tailored Resume

Cover Letter