Job Description: Cybersecurity Consultant (Penetration Testing Specialist)

Location: [Remote]
Employment Type: Casual/Contract
Department: Cybersecurity / Offensive Security

About 3Tenets Consulting

3Tenets Consulting is a leader in offensive security and penetration testing, dedicated to helping organizations proactively identify and mitigate cyber threats. Our team of highly skilled security professionals works across diverse industries, ensuring businesses remain resilient against advanced cyber threats.

We are seeking Cybersecurity Consultants (Penetration Testing Specialists) with expertise in any of the following: Internal Penetration Testing, External Penetration Testing, Web Penetration Testing, Mobile PT, Operational Technology PT, , Cloud Security Assessments, Social Engineering, and Physical Security Testing. The candidate may have a subset of these skills to apply to the position. We are open to giving opportunities for professional growth. The ideal candidate is a hands-on security expert who can think like an attacker and provide actionable security insights to clients.

Key Responsibilities

1. Penetration Testing & Red Team Operations

Conduct internal and external network penetration testing to uncover security vulnerabilities in corporate IT environments.
Perform web application penetration testing (OWASP Top 10, API security assessments, business logic testing).
Execute mobile application security testing (Android/iOS, reverse engineering, dynamic/static analysis).
Assess Operational Technology (OT), SCADA, and industrial control systems (ICS) security for critical infrastructure.
Simulate social engineering attacks (phishing, vishing, impersonation, physical breaches) to test human security awareness.
Conduct physical security assessments (badge cloning, RFID spoofing, lock picking, covert entry techniques).

2. Vulnerability Research & Exploitation

Identify and exploit zero-day vulnerabilities and misconfigurations across IT, OT, web, cloud and mobile environments.
Develop custom scripts, exploits, and payloads to enhance penetration testing methodologies.
Reverse engineer applications and industrial systems to detect security flaws.

3. Security Reporting & Advisory

Document technical findings, risk assessments, and business impact analyses for clients.
Present penetration test results and remediation strategies to technical teams and executive leadership.
Work closely with blue teams and SOC analysts to validate detection capabilities and security controls.

4. Research & Continuous Learning

Stay ahead of emerging cyber threats, attack vectors, and penetration testing techniques.
Contribute to security research, blog posts, conference talks, and vulnerability disclosures.
Develop internal penetration testing tools and automation scripts.

Required Skills & Experience

Technical Skills:

Internal & External Penetration Testing – Expertise in discovering and exploiting network vulnerabilities, lateral movement, privilege escalation, and Active Directory attacks.
Web Application Security – Advanced knowledge of OWASP Top 10, API security flaws, authentication bypasses, SQL injection, and business logic vulnerabilities.
Mobile Application Security – Experience with Android/iOS security, reverse engineering, Frida, Drozer, APK decompilation, and binary exploitation.
Operational Technology (OT) & ICS Security – Understanding of SCADA, Modbus, DNP3, industrial protocols, and embedded system security.
Social Engineering & Physical Security Testing – Experience in phishing, vishing, badge cloning, physical intrusion, and security awareness testing.
Cloud & Container Security – Familiarity with AWS, Azure, GCP security misconfigurations, Kubernetes pentesting, and cloud threat modeling.
Red Teaming & Adversary Simulation – Hands-on experience in bypassing security controls, evading detection, and executing advanced attack techniques.

Tools & Technologies:

Penetration Testing Tools: Burp Suite, Metasploit, Cobalt Strike, BloodHound, Responder, CrackMapExec, etc.
Web & Mobile Testing Tools: OWASP ZAP, MobSF, Frida, JADX, APKTool, etc.
Wireless & Physical Security Tools: Proxmark3, Flipper Zero, RFID/NFC tools, Hak5 devices.
Cloud Security Tools: ScoutSuite, Prowler, Pacu, CloudSploit, Kube-Hunter.
Programming & Scripting: Python, Bash, PowerShell, Go, JavaScript, C/C++.

Preferred Qualifications & Certifications

OSCP (Offensive Security Certified Professional)
OSCE / OSEP / OSWE (Offensive Security Advanced Certifications)
CRTP / CRTE / CRTL (Certified Red Team Professional)
GWAPT (GIAC Web Application Penetration Tester)
GMOB (GIAC Mobile Security)
GICSP (GIAC Industrial Cybersecurity Specialist)

Soft Skills & Culture Fit

Passion for Offensive Security – You enjoy breaking things ethically and finding creative attack paths.
Clear Communication Skills – Ability to translate technical vulnerabilities into business risk for executives and technical teams.
Self-Starter & Research-Oriented – You take initiative, stay curious, and continuously enhance your skill set.
Team Collaboration – Work closely with red teams, blue teams, SOC analysts, and developers.
Adversary Mindset – You think like a hacker and continuously test security controls.

Why Join 3Tenets Consulting?

Work on high-impact cybersecurity projects across multiple industries.
Access to advanced security tools, red team frameworks, and private research labs.
Continuous learning with paid certifications, conferences, and training programs.
Competitive salary with performance-based bonuses.
Remote-friendly work culture with a highly skilled offensive security team.

How to Apply?

Send your resume, GitHub/LinkedIn profile, and a short write-up on your latest security research or CTF participation (if applicable) to: admin@3tenets.ca

Join us and help to secure organizations through ethical hacking and advanced penetration testing!

Job Types: Fixed term contract, Casual

Expected hours: 35 per week

Flexible language requirement:

French not required

Schedule:

Monday to Friday
Weekends as needed

Application question(s):

Are you OSCP Certified or have a related certification?

Experience:

Cybersecurity Testing: 1 year (required)

Location:

Canada (required)

Work Location: Remote

Application deadline: 2025-03-07

3Tenets Consulting Inc

New Jobs

Cybersecurity Consultant - Penetration Testing Specialist