Senior Penetration Tester for High-Volume IAM Hardening

Orbit Labs

Contract · Remote · Flexible hours

About the role

Orbit Labs is expanding its multi‑tenant B2B platform and needs a senior Penetration Tester to harden the upcoming "TenantShield" module. You will lead security assessments that ensure each tenant environment remains isolated and compliant while the feature ships on a tight schedule.

Key responsibilities

• Perform black‑box and white‑box penetration tests on the TenantShield API gateway using Burp Suite and OWASP ZAP.
• Identify privilege escalation paths in containerized micro‑services orchestrated by Kubernetes.
• Develop custom exploitation scripts in Python to validate findings against multi‑tenant data segregation.
• Produce detailed vulnerability reports with remediation steps for developers within a 48‑hour turnaround.
• Collaborate with the DevSecOps team to integrate automated security scans into the CI pipeline (GitLab CI).
• Conduct a final security sign‑off review before the feature release deadline.

Must-have skills

• 5+ years of hands‑on penetration testing experience.
• Proficiency with tools such as Burp Suite, Nmap, Metasploit, and OWASP ZAP.
• Deep understanding of web application security, OAuth2, and multi‑tenant architectures.
• Strong scripting ability in Python for proof‑of‑concept exploits.
• Experience securing Linux‑based cloud environments.

Nice to have

• Familiarity with cloud platforms (AWS/GCP) and IAM policies.
• Certifications like OSCP or GPEN.