Inabia Software & Consulting Inc.
Senior Penetration Tester / Red Team Consultant
Remote, WA - Contracted
Overview
Inabia is seeking a Senior Penetration Tester / Red Team Consultant to join our team on a project-based engagement of up to six months. This is a primarily remote role with occasional onsite meetings in Seattle, WA, focused on delivering high-quality offensive security assessments across enterprise, cloud, and identity environments. The ideal candidate brings proven hands-on experience in adversary simulation, vulnerability exploitation, and technical client communication.
Responsibilities
- Conduct enterprise internal and external penetration tests against network, web application, and API targets
- Execute Red Team and adversary simulation engagements aligned to MITRE ATT&CK and industry frameworks
- Perform Active Directory and Entra ID security testing, including privilege escalation and lateral movement techniques
- Assess Azure and Microsoft 365 environments for security vulnerabilities and misconfigurations
- Test VPN, SSO/MFA, and remote-access solutions for exploitable weaknesses
- Validate, exploit, and conduct post-exploitation activities in authorized, controlled engagements
- Produce clear, actionable technical reports with prioritized remediation recommendations
- Present findings and risk summaries to technical and non-technical stakeholders
Key Qualifications
- Minimum 3+ years of hands-on penetration testing or offensive security experience (5+ years strongly preferred)
- Demonstrated expertise in enterprise internal and external penetration testing
- Experience conducting Red Team and adversary simulation engagements
- Proficiency in Active Directory and Entra ID security testing
- Hands-on experience with Azure and Microsoft 365 security assessments
- Strong skills in network, web application, and API penetration testing
- Familiarity with VPN, SSO/MFA, and remote-access security testing
- Deep understanding of privilege escalation and lateral movement techniques
- Experience with vulnerability validation, exploitation, and post-exploitation workflows
- Working knowledge of NIST SP 800-115, MITRE ATT&CK, and OWASP methodologies
- Excellent technical writing skills and ability to present findings clearly to client audiences
Preferred Qualifications
- Active offensive security certification(s) such as OSCP, OSEP, OSWE, GPEN, GXPN, GWAPT, CEH, or equivalent
