Job Description
In the game of life, are you stuck on level "Meh"? Why not unlock a legendary career move with us at Infinite Ranges!
Let me spill the tea- Infinite Ranges stands on the cutting edge of deploying, implementing, and custom consulting for tailored Cybersecurity, application modernization and DevSecOps solutions. In under 48 months, we’ve grown to 60+ OEM partners, a staff of over 50, and hundreds of engagements, delivering both people and professional services at-scale.
About the Role: This specific project is supposed to last about 12-15 weeks and total of 140hrs give or take, fully remote.
Infinite Ranges is seeking an experienced and creative Lead Penetration Tester to join a high-impact engagement. This role is all about offensive security—building, scripting, and executing attack scenarios across a multitude of modern IT environments.
You'll work hands-on with physical and virtual targets, execute/develop complex attack chains, and lead red team exercises. This is a unique opportunity to apply your offensive toolkit in a high-fidelity environment and leave a lasting impact on cyber readiness.
What You Will Be Doing: - Develop and execute penetration testing campaigns targeting various infrastructure devices.
- Simulate realistic, multi-phase attack chains including lateral movement, privilege escalation, and multiple specific threat vectors.
- Create custom exploits, payloads, and evasion techniques against emulated and physical assets.
- Work closely with scenario designers to script repeatable red team exercises with measurable impact.
- Conduct threat emulation using TTPs based on real-world APTs and adversaries.
- Define offensive toolkits and infrastructure within the environment.
- Document post-exercise findings, attack graphs, and defensive recommendations.
- Participate in workshops and live events to demo adversarial behavior and tactics.
What We Want To See: - 5+ years of experience in penetration testing, ethical hacking, or red team operations.
- Strong understanding of the MITRE ATT&CK and ICS ATT&CK, and OWASP frameworks.
- Comfort using offensive security tools
- Proficiency with scripting and automation in multiple languages.
- Ability to document complex attacks with clear objectives and results for both technical and non-technical audiences.
- Ability to lead and train Red Teams on attack vectors, attacks ,and APTs
Technologies Used in This Role: - Offensive Tools: Metasploit, Cobalt Strike, Kali Linux, Impacket, Responder, nmap, BloodHound, Maltego, Burp Suite
- Scripting: Python, Bash, PowerShell, VBA
- Platforms: GCP, AWS, VMware, Azure, Docker, Windows, Mac, Linux
- Vulnerability Analysis: Tenable, Greenbone OpenVAS, Qualys
Bonus Points For: - Certifications like OSCP, OSEP, GPEN, GXPN, or GRPT
- Experience simulating APT behavior and running attack plans
- Familiarity with threat intelligence integration
- Background in industrial or manufacturing cybersecurity
- Experience mentoring or coaching blue teams
- Familiarity with ICS/OT environments (e.g., SCADA, PLCs, HMIs, industrial protocols).
Job Tags
Contract work, Temporary work, Remote work