Your role and responsibilities
A Penetration Tester with deep technical expertise in the processes, procedures, tools and methodology for assessing IT Security risk. The role requires an individual who can independently visualize the network topology from information provided, prepare tests, conduct hacker simulations and demonstrate the likelihood of data compromise via 'proof of concept exploitation' of a given vulnerability. Further to the tests, to be able to clearly describe the problem, the concerns and provide recommendations to fix.
Required education
Associate's Degree/College Diploma
Preferred education
Bachelor's Degree
Required technical and professional expertise
Candidates will need to pass a Penetration Testing skills evaluation test.
- Penetration Testing Experience with operating systems, web applications and network infrastructure. Experience with using Penetration Testing Tools. e.g. NMap, Nessus, Metasploit, BurpSuite, Nikto, Tcpdump. Required certification: OSCP or higher Offensive Security Qualification
- AI Skills: Ability to work with LLMs, Agentic, Tools, MCP / Administrator level knowledge of Server Operating Systems specifically Unix and Windows.
- Intricate technical knowledge of TCP/IP Networking/Routing, Intranet / Internet Architectures and Segregation Technologies/VLANs, Firewalls, Intrusion Detection, Intrusion Prevention, SQL Databases 'Ability to test web technologies e.g. web applications, containers, container managers.
- Programming ability to create, read and modify exploit code to achieve system penetration. C, C++, Java, C#, scripting knowledge is an asset.
- Ability to document and present the penetration testing results including recommendations to fix.
Preferred technical and professional experience
- Penetration Testing Experience with operating systems, web applications and network infrastructure.
- Experience with using Penetration Testing Tools. e.g. NMap, Nessus, Metasploit, BurpSuite, Nikto, Tcpdump.
- Required certification: OSCP or higher Offensive Security Qualification
- AI Skills: Ability to work with LLMs, Agentic, Tools, MCP
- Administrator level knowledge of Server Operating Systems specifically Unix and Windows.
- Intricate technical knowledge of TCP/IP Networking/Routing, Intranet / Internet Architectures and Segregation Technologies/VLANs, Firewalls, Intrusion Detection, Intrusion Prevention, SQL Databases
- Ability to test web technologies e.g. web applications, containers, container managers
- Programming ability to create, read and modify exploit code to achieve system penetration. C, C++, Java, C#, scripting knowledge is an asset.
- Ability to document and present the penetration testing results including recommendations to fix.
OTHER RELEVANT JOB DETAILSIBM offers a competitive and comprehensive benefits program. Eligible employees may have access to:
- Healthcare benefits including medical & prescription drug coverage, dental, vision, and mental health & well being
- Financial programs such as 401(k), cash balance pension plan, the IBM Employee Stock Purchase Plan, financial counseling, life insurance, short & long- term disability coverage, and opportunities for performance based salary incentive programs
- Generous paid time off including 12 holidays, minimum 56 hours sick time, 120 hours vacation, 12 weeks parental bonding leave in accordance with IBM Policy, and other Paid Care Leave programs. IBM also offers paid family leave benefits to eligible employees where required by applicable law
- Training and educational resources on our personalized, AI-driven learning platform where IBMers can grow skills and obtain industry-recognized certifications to achieve their career goals
- Diverse and inclusive employee resource groups, giving & volunteer opportunities, and discounts on retail products, services & experiences
We consider qualified applicants with criminal histories, consistent with applicable law.
This position was posted on the date cited in the key job details section and is anticipated to remain posted for 21 days from this date or less if not needed to fill the role.
IBM will not be providing visa sponsorship for this position now or in the future. Therefore, in order to be considered for this position, you must have the ability to work without a need for current or future visa sponsorship.
The compensation range and benefits for this position are based on a full-time schedule for a full calendar year. The salary will vary depending on your job-related skills, experience and location. Pay increment and frequency of pay will be in accordance with employment classification and applicable laws. For part time roles, your compensation and benefits will be adjusted to reflect your hours. Benefits may be pro-rated for those who start working during the calendar year.
