Senior Penetration Tester Needed for Secrets Management Rollout

CoreData Systems

Contract · Remote · Flexible hours

About the role

CoreData Systems is expanding its multi‑tenant security layer for the flagship B2B analytics suite, codenamed "Nimbus Vault". As a Senior Penetration Tester you will lead the security validation of new tenant isolation features, ensuring robust defenses before release.

Key responsibilities

• Design and execute black‑box penetration tests against the tenant isolation API using Burp Suite and OWASP ZAP.
• Develop custom Python scripts to automate exploitation of discovered misconfigurations in Docker‑based microservices.
• Perform network‑level assessments of Kubernetes ingress controllers and service meshes for cross‑tenant leakage.
• Produce detailed vulnerability reports with CVSS scores, remediation guidance, and proof‑of‑concept code.
• Collaborate with DevSecOps engineers to integrate findings into CI/CD pipelines via GitLab CI.
• Validate remediation by re‑testing and delivering sign‑off for the multi‑tenant rollout milestone.

Must-have skills

• 5+ years hands‑on penetration testing of web applications and cloud environments.
• Expertise with tools such as Burp Suite, OWASP ZAP, Nmap, and Metasploit.
• Strong scripting ability in Python for automation and exploit development.
• Deep understanding of Linux hardening, container security, and Kubernetes networking.
• Experience reporting to senior stakeholders with clear, actionable recommendations.

Nice to have

• Familiarity with cloud providers (AWS/Azure) security services.
• Certifications like OSCP or OSCE.