Penetration Tester (1099 Independent Contractor, U.S.-Based)
关于社会安全 社会安全是一个现代网络安全合作伙伴，是为需要清晰度，速度和可测量的影响的组织而建立的。我们帮助领导团队保护最重要的事情保护价值，减少运营风险，并在组织成长的每个阶段加强弹性。基于好奇心，真实性，适应能力和实际执行，我们挑战假设并提供明确的，可操作的情报 - 而不是理论检查列表。我们的方法融合了战略咨询与实践技术专业知识，确保决策得到信息，投资优先，以及成熟的安全计划。凭借数十年的经验，支持财富500强企业，全球品牌和高增长公司，我们的领导力为复杂环境，运营成熟模式以及直接影响组织绩效的风险因素提供了深入的现实见解。透测试器 （1099独立承包商，美国）Socium 正在寻找一个以美国为本地建立的独立透测量顾问来支持客户参与项目。这个角色最适合中到高级测试员，谁可以自主执行范围评估，通过手动测试验证真实世界的可利用性，并精细化客户准备的报告和调查。主要责任 · 在达成的参与规则范围内进行网络应用，API,外部/内部网络和选择云透测试 · 随时手动验证发现，区分可利用风险与噪音和链问题 · 制作可交付的报告，包括执行总结，技术细节，证据，复制步骤以及优先修复指导 · 向技术和非技术利益相关者提供结果并支持与参与范围有关的有限重检查 · 需要5年以上专业透测验 · 3年以上领导面向客户咨询或同等工作经验 · 强大的实操经验至少两个以下：网络应用程序/API,外部/内部网络测试，Active Directory, AWS/Azure/GCP 测试 · 强大的书面通信和报告写作技能 · Burp Suite Pro,Nmap,Metasploit 以及 Python,Bash 或 PowerShell 中脚本编程经验 · 手机测试，社会工程或对手模拟经验 · OSCP,OSEP,OSWE, GWAPT,GPEN,GXPN 等相关证书
查看英文原文
About Socium Security
Socium Security is a modern cybersecurity partner built for organizations that need clarity, speed, and measurable impact. We help leadership teams safeguard what matters most—protecting value, reducing operational risk, and strengthening resilience across every stage of organizational growth.
Grounded in curiosity, authenticity, adaptability, and practical execution, we challenge assumptions and deliver clear, actionable intelligence - not theoretical checklists. Our approach blends strategic advisory with hands-on technical expertise, ensuring decisions are informed, investments are prioritized, and security programs mature with purpose.
With decades of experience supporting Fortune 500 enterprises, global brands, and high-growth companies, our leadership brings deep, real-world insight into complex environments, operational maturity models, and the risk factors that directly influence organizational performance.
Penetration Tester (1099 Independent Contractor, U.S.-Based)
Socium is seeking a U.S.-based independent penetration testing consultant to support client engagements on a project basis. This role is best suited for a mid-to-senior tester who can independently execute scoped assessments, validate real-world exploitability through manual testing, and deliver polished client-ready reports and debriefs.
Primary responsibilities
- Conduct web application, API, external/internal network, and selected cloud penetration tests within agreed rules of engagement
- Manually validate findings, distinguish exploitable risk from noise, and chain issues where appropriate
- Produce deliverable reports with executive summary, technical details, evidence, reproduction steps, and prioritized remediation guidance
- Present results to technical and non-technical stakeholders and support limited retesting tied to the engagement scope
Required experience
- 5+ years of professional penetration testing experience
- 3+ years leading client-facing consulting engagements or equivalent
- Strong hands-on depth in at least two of the following: web applications/APIs, external/internal network testing, Active Directory, AWS/Azure/GCP testing
- Strong written communication and report-writing skills
- Experience with Burp Suite Pro, Nmap, Metasploit, and scripting in Python, Bash, or PowerShell
Preferred
- Mobile testing, social engineering, or adversary simulation experience
- Relevant certifications such as OSCP, OSEP, OSWE, GWAPT, GPEN, GXPN, PNPT, or CPTS
- Experience presenting findings to clients or executives
Contract terms
- 1099 independent contractor engagement
- Must reside and perform services within the United States
- Must be able to provide a W-9 and invoice as a U.S.-based individual or business
- No third-party agencies, staffing firms, or offshore subcontracting
- Contractor is responsible for standard tooling and methods used to meet agreed deliverables, subject to client testing windows and rules of engagement
Originally posted on Himalayas