Senior Penetration Tester – Multi-Region Threat Mitigation

Orbit Labs

Contract · Remote · Flexible hours

About the role

Orbit Labs is expanding its multi‑tenant B2B platform, codenamed "Nebula Core," and needs a Senior Penetration Tester to harden the new tenant isolation layer. You will lead security assessments for the upcoming feature set, ensuring compliance and resilience before launch.

Key responsibilities

• Perform black‑box and white‑box penetration tests on the Nebula Core tenant isolation APIs using Burp Suite and OWASP ZAP.
• Identify and exploit privilege‑escalation paths in the Kubernetes‑based microservice architecture.
• Develop custom Python scripts to automate credential‑dumping and token‑replay scenarios across tenant boundaries.
• Produce a detailed risk report with CVSS scores, remediation guidance, and a prioritized remediation backlog for the next sprint.
• Collaborate with DevSecOps engineers to integrate findings into CI pipelines and enforce security gates.
• Validate the effectiveness of newly implemented WAF rules and runtime security policies.

Must-have skills

• Extensive experience in penetration testing of SaaS and multi‑tenant environments.
• Proficiency with tools such as Burp Suite, Metasploit, Nmap, and OWASP ZAP.
• Strong scripting abilities in Python for exploit development and automation.
• Deep understanding of Linux hardening, container security, and network protocols.

Nice to have

• Familiarity with cloud platforms (AWS, GCP) and IAM misconfigurations.
• Previous work on security testing of CI/CD pipelines.