Senior Penetration Tester- Contract

CASTILLE IS HIRING!
Join the Castille Global Teams!
Role- Penetration Tester (Contract)
Work Mode- Remote
Engagement Type: Project-based Assignment; B2B Contract (Outside IR35)
Duration: 6 months with auto renew
Be part of our Global Engineering Network!
One of our clients, an international consulting firm is looking for highly skilled seeking an experienced Penetration Tester with strong expertise in penetration testing, vulnerability management, and threat intelligence. The ideal candidate will have hands-on experience with Threat-Led Penetration Testing (TLPT) / TIBER frameworks. This role involves conducting advanced penetration tests, identifying security vulnerabilities, and simulating real-world cyber threats to enhance the security posture of our clients.
Key Deliverables
Conduct extensive penetration tests across networks, applications, cloud environments, and infrastructure.
Perform vulnerability assessments and provide risk-based remediation recommendations.
Lead Threat-Led Penetration Testing (TLPT) / TIBER engagements, working with financial institutions and regulatory bodies.
Utilize Threat Intelligence methodologies to simulate realistic attack scenarios.
Produce detailed technical reports outlining findings, risk levels, and mitigation strategies.
Collaborate with security teams, SOC analysts, and blue teams to improve defensive strategies.
Stay updated on the latest attack techniques, tools, and industry best practices.
Responsibilities-
5+ years experience in Penetration Testing.
Strong hands-on experience in Red Team Operations, adversary emulation, and attack path analysis.
Extensive Web, API, and Mobile Application Penetration Testing experience is required.
Threat-Led Penetration Testing (TLPT) / TIBER experience is highly desirable.
Experience with C2 frameworks, Active Directory attacks, lateral movement, and privilege escalation techniques.
Proficiency in tools like Burp Suite, Metasploit, Cobalt Strike, Kali Linux, BloodHound, and exploit development
Familiarity with MITRE ATT&CK, NIST, and other cybersecurity frameworks
Experience in cloud penetration testing (AWS, Azure, GCP)
Preferred certifications: OSEP, CRTO, CRTO II.
Interested and qualified candidates are encouraged to apply via lboampong@castillians.com

Work arrangement
Yes