The Ethical Hacker - Infrastructure & Red Team is responsible for planning, executing, and reporting on infrastructure penetration testing, cloud security assessments, Active Directory security assessments, and adversary simulation engagements. The role evaluates the effectiveness of client security controls by identifying, validating, and demonstrating exploitable security vulnerabilities across enterprise infrastructure using industry-recognized offensive security methodologies.
Working independently and collaboratively with other security consultants, the Ethical Hacker performs offensive security assessments across on-premises, hybrid, and cloud environments while contributing to red team operations, purple team exercises, and advanced security testing engagements. The role provides technical guidance to clients through detailed reporting and presentations while contributing to the continuous improvement of Packetlabs' offensive security methodologies, tooling, and service offerings.
Who we are looking for- Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related discipline; equivalent practical experience will be considered.
- Minimum of 3 years of professional experience performing infrastructure penetration testing, red teaming, adversary simulation, or offensive security consulting.
- Demonstrated experience conducting penetration testing across enterprise infrastructure, including Windows, Linux, Active Directory, Microsoft Entra ID, cloud platforms, and enterprise networking.
- Experience performing internal and external network penetration testing, privilege escalation, Active Directory security assessments, and lateral movement testing.
- Experience assessing cloud environments, including AWS, Microsoft Azure, or Google Cloud Platform.
- Strong understanding of enterprise networking, authentication technologies, identity management, cloud security, and offensive security methodologies.
- Experience using industry-standard offensive security frameworks, tools, and tradecraft.
- Excellent technical writing, presentation, and communication skills, with the ability to communicate findings to both technical and executive stakeholders.
- Industry certifications such as OSCP, OSEP, CRTO, CRTE, CARTP, CARTA, CREST CRT, CREST CCT, PNPT, GPEN, GXPN, or equivalent are considered an asset. OSCP or equivalent demonstrated technical capability is strongly preferred.
- Experience participating in Red Team, Purple Team, adversary simulation, or threat emulation engagements is considered an asset.
- Customer-first mentality. You are a great communicator with clients, project managers, and teammates. Rapid responses and on time.
- You deliver work that you take pride in. Your work is an autograph of your excellence.
- You dig deeper into every finding. Doesn't stop until impact is proven.
- You are comfortable being uncomfortable. Goes towards obstacles, not away from them. Consulting isn't your typical job and requires adapting to rapidly changing environments.
- You are always learning. Cybersecurity is changing every day, and you need to keep up or want to keep up. Be deeply aware of your skillset and be willing to improve.
- You are self-motivated and dependable.
- You are humble. Egos don't have a place at Packetlabs.
What you'll be doing- Infrastructure Security Assessments
- Plan and execute infrastructure penetration testing engagements across on-premises, hybrid, cloud, wireless, and enterprise network environments.
- Perform internal and external network penetration testing to identify, validate, and exploit security vulnerabilities using manual testing methodologies and industry-standard offensive security tools.
- Assess enterprise technologies including Active Directory, Microsoft Entra ID (Azure AD), Windows and Linux environments, virtualization platforms, cloud services, and supporting infrastructure.
- Evaluate cloud environments including AWS, Microsoft Azure, and Google Cloud Platform to identify configuration weaknesses, privilege escalation opportunities, identity risks, and cloud security vulnerabilities.
- Assess containerized environments, Kubernetes platforms, CI/CD pipelines, and cloud-native technologies where applicable.
- Red Team & Adversary Simulation
- Participate in and lead adversary simulation, red team, and objective-based security engagements in accordance with established methodologies and client objectives.
- Execute offensive security operations across the attack lifecycle, including reconnaissance, initial access, persistence, privilege escalation, credential access, lateral movement, defense evasion, command and control, and objective execution.
- Support purple team engagements by working collaboratively with defensive teams to validate detections, improve monitoring capabilities, and strengthen defensive controls.
- Develop and execute attack scenarios that demonstrate realistic business impact while maintaining client system integrity.
- Client Delivery & Reporting
- Prepare comprehensive technical reports that clearly communicate vulnerabilities, attack paths, business impact, risk ratings, and remediation recommendations.
- Present assessment findings to technical teams, executive stakeholders, and client leadership.
- Provide technical guidance on remediation strategies, security architecture, and defensive improvements.
- Manage assigned engagements while ensuring delivery quality, timelines, and client expectations are achieved.
- Technical Leadership & Continuous Improvement
- Maintain expertise in offensive security methodologies, infrastructure security, cloud technologies, Active Directory security, and emerging attack techniques.
- Contribute to the development and continuous improvement of testing methodologies, internal tooling, technical documentation, and service offerings.
- Participate in technical research, automation initiatives, internal training, and knowledge-sharing activities.
- Collaborate with consulting teams to strengthen technical quality, consistency, and service delivery across the Offensive Security practice.
- Perform other duties as assigned.
How is success defined- Performance in this role is evaluated using a combination of technical, operational, and client-focused measures, including but not limited to:
- Successful delivery of infrastructure penetration testing and adversary simulation engagements within established quality, budget, and timeline expectations.
- Accuracy, completeness, and technical quality of client reports and deliverables.
- Demonstrated expertise across enterprise infrastructure, cloud security, Active Directory, and offensive security methodologies.
- Positive client feedback regarding technical expertise, communication, and professionalism.
- Contribution to technical research, methodology development, automation, and knowledge-sharing initiatives.
- Effective collaboration with Delivery Managers, Project Managers, and consulting team members.
- Ongoing professional development through certifications, research, and technical skill advancement.
Why us?- A leadership team that values substance, quality, and disciplined execution
- Collaboration with a highly skilled team of security professionals who are passionate about technical excellence and raising the bar
- Competitive compensation and growth opportunity
- Paid education and professional development reimbursement to support continued learning, certifications and technical growth
- Flexible work environment that empowers employees to do their best work
- Paid volunteer day each year to give back to your community
- Paid Birthday day off
- Paid U.S. public holidays
- Fully remote within Texas or Florida
The pay range for this role is:
90,000 - 130,000 USD per year (Remote (Texas))
