Senior Penetration Tester / Red Team Consultant

Location: Remote, WA

Overview

Inabia is seeking a Senior Penetration Tester / Red Team Consultant to join our team on a project-based engagement of up to six months. This is a primarily remote role with occasional onsite meetings in Seattle, WA, focused on delivering high-quality offensive security assessments across enterprise, cloud, and identity environments. The ideal candidate brings proven hands-on experience in adversary simulation, vulnerability exploitation, and technical client communication.

Responsibilities

• Conduct enterprise internal and external penetration tests against network, web application, and API targets
• Execute Red Team and adversary simulation engagements aligned to MITRE ATT&CK and industry frameworks
• Perform Active Directory and Entra ID security testing, including privilege escalation and lateral movement techniques
• Assess Azure and Microsoft 365 environments for security vulnerabilities and misconfigurations
• Test VPN, SSO/MFA, and remote-access solutions for exploitable weaknesses
• Validate, exploit, and conduct post-exploitation activities in authorized, controlled engagements
• Produce clear, actionable technical reports with prioritized remediation recommendations
• Present findings and risk summaries to technical and non-technical stakeholders

Key Qualifications

• Minimum 3+ years of hands-on penetration testing or offensive security experience (5+ years strongly preferred)
• Demonstrated expertise in enterprise internal and external penetration testing
• Experience conducting Red Team and adversary simulation engagements
• Proficiency in Active Directory and Entra ID security testing
• Hands-on experience with Azure and Microsoft 365 security assessments
• Strong skills in network, web application, and API penetration testing
• Familiarity with VPN, SSO/MFA, and remote-access security testing
• Deep understanding of privilege escalation and lateral movement techniques
• Experience with vulnerability validation, exploitation, and post-exploitation workflows
• Working knowledge of NIST SP 800-115, MITRE ATT&CK, and OWASP methodologies
• Excellent technical writing skills and ability to present findings clearly to client audiences

Preferred Qualifications

• Active offensive security certification(s) such as OSCP, OSEP, OSWE, GPEN, GXPN, GWAPT, CEH, or equivalent