Penetration Tester / Red Team Operator at Remote only Full Time

About the Role

We are seeking a highly skilled Penetration Tester / Red Team Operator with proven expertise in conducting authorized security assessments. This role requires deep hands-on experience in exploitation and post-exploitation techniques, applied strictly within ethical and legally approved environments.

You will simulate advanced real-world adversaries, identify vulnerabilities, demonstrate impact through controlled exploitation, and provide actionable remediation to improve the organization’s and clients’ overall security posture.

Key Responsibilities

• Perform authorized penetration tests and red team operations to identify, validate, and document vulnerabilities.
• Conduct controlled exploitation activities that demonstrate system compromise in authorized environments.
• Execute post-exploitation techniques such as privilege escalation, lateral movement, and persistence.
• Deliver clear and detailed technical reports with practical remediation steps for both technical teams and executive stakeholders.
• Collaborate closely with security and engineering teams to strengthen organizational defenses and reduce real-world attack exposure.

Requirements

• 2–5 years of practical experience in penetration testing, red team engagements, or bug bounty programs.
• Proven track record of successful exploitation in authorized environments (e.g., achieving shell access, privilege escalation, lateral movement).
• Strong knowledge of:
• Web exploitation: injection flaws, file upload vulnerabilities, deserialization attacks.
• System exploitation: Windows & Linux privilege escalation, misconfigurations, persistence techniques.
• Network penetration: pivoting, lateral movement, and advanced network exploitation.
• Proficiency with tools such as Metasploit, Cobalt Strike, Nmap, Burp Suite, and custom payload development.
• Solid understanding of operating systems, networking fundamentals, and security controls.
• Excellent technical documentation and communication skills.
• Strong commitment to ethical, legal, and authorized testing practices.

Preferred Qualifications

• Industry certifications: OSCP, OSEP, CRTP, CRTO.
• Recognized achievements in bug bounty programs, CVEs, or published security research.
• Contributions to open-source security tools or frameworks.
• Experience with cloud penetration testing (AWS, Azure, GCP) or scripting/automation (Python, PowerShell, Bash).

Why Join Us?

At KREOVATE NUSA DIGITAL, we value skill, innovation, and ethics. Joining us means you’ll be part of a remote-first international team that thrives on solving real-world cybersecurity challenges.

• 🌍 100% Remote work with flexible hours
• 🚀 Challenging projects with direct real-world impact (not just lab simulations)
• 📈 Opportunities to grow in advanced red team operations and adversary simulation
• 🤝 Collaborative culture with global security experts
• 💡 A workplace that values continuous learning, ethical hacking, and innovation

Compensation

💰 ₹12L – ₹20L per year (~USD 14K – 23K annually)

• ESOPs available (for select roles)
• Transparent performance-based growth path

📩 How to Apply

If you’re passionate about ethical hacking, real-world security challenges, and continuous learning, we’d love to hear from you. Apply directly via this platform or connect with our hiring team.