Senior Penetration Tester Needed for IAM Hardening

Northbay Systems

Contract · Remote · Flexible hours

About the role

Northbay Systems is launching a security hardening initiative for its suite of cloud‑hosted applications. As a Senior Penetration Tester you will lead the offensive assessment of the newly built "Nimbus Guard" module, identifying weaknesses before they reach production. This short‑term engagement focuses on delivering actionable findings that directly improve the security posture of our multi‑tenant environment.

Key responsibilities

• Perform external and internal network pen‑tests against AWS EC2, RDS, and S3 assets using Burp Suite and Nmap.
• Execute container‑level assessments on Docker and Kubernetes workloads with kube‑hunter and Trivy.
• Develop custom Python scripts to automate privilege escalation checks on Linux instances.
• Produce a detailed remediation roadmap aligned with the Nimbus Guard hardening checklist, targeting a 30‑day mitigation window.
• Present findings to senior engineering leads via concise slide decks and live walkthroughs.
• Collaborate with the DevSecOps team to integrate findings into CI/CD pipelines for continuous security validation.

Must-have skills

• 5+ years of hands‑on penetration testing experience.
• Deep knowledge of AWS security services and cloud‑native attack vectors.
• Proficiency with Kali Linux tools, Metasploit, and scripting in Python.
• Experience writing clear, actionable security reports for technical and executive audiences.
• Strong understanding of OWASP Top 10 and MITRE ATT&CK frameworks.

Nice to have

• Certifications such as OSCP, GPEN, or AWS Security Specialty.
• Familiarity with infrastructure‑as‑code scanning tools like Checkov.