Senior Penetration Tester – Zero Trust Setup

Silverline Labs

Contract · Remote · Flexible hours

About the role

Silverline Labs is launching a security hardening initiative for its suite of cloud‑hosted applications, code‑named "Nimbus Shield". We need a Senior Penetration Tester to lead the effort, uncover vulnerabilities, and validate remediation across multi‑tenant AWS environments.

Key responsibilities

• Perform external and internal pen‑tests on the Nimbus Shield micro‑services using Burp Suite, Nmap, and Metasploit.
• Develop custom Python scripts to automate credential‑spraying and API fuzzing for AWS Lambda endpoints.
• Map attack surfaces across Kubernetes clusters, IAM policies, and S3 bucket configurations.
• Deliver a detailed risk report with proof‑of‑concept exploits and prioritized remediation steps within two weeks.
• Collaborate with DevSecOps engineers to integrate findings into CI/CD pipelines and remediate via Terraform.
• Present weekly status briefings to senior leadership, highlighting critical findings and mitigation timelines.

Must-have skills

• 5+ years of hands‑on penetration testing experience.
• Deep expertise with AWS security services and cloud‑native attack vectors.
• Proficiency in Python for exploit development and automation.
• Strong knowledge of Linux hardening, network protocols, and web application security.
• Experience producing comprehensive technical reports for executive audiences.

Nice to have

• Certifications such as OSCP, OSCE, or AWS Security Specialty.
• Familiarity with container security tools like Trivy or Aqua.