SecurityBoat RedOps Member (Freelance Pentester)
SecurityBoat
IndiaremotePosted 12 days ago
Skill Required
Penetration-TesterEthical-HackerRed-Team-EngineerSecurity-ConsultantCybersecurity-SpecialistRed-Team-OperatorRed-TeamerRed-Team-ConsultantRed-Team-Security-EngineerRed-Team-SpecialistFreelance-Penetration-TesterPenetration TestingIAMCloud SecurityBurp SuitesecuritybuildingGraphQLAndroidetc.)TestNGAzureOWASPCloudAPIsiOSAWSGCPJWTandContract
Key highlights
- Compensation: Paid per project or hour
- Experience: Minimum 2+ years in penetration testing or bug bounty
- Contract Type: Freelance contract
- Key Benefit: Priority access to high-quality recurring engagements
- Requirement: Proficiency in at least 2 core technical security areas
Role overview
SecurityBoat is building a cutting-edge Penetration Testing as a Service (PTaaS) platform, where the future of offensive security meets scale and speed. As a RedOps Member, you’ll act as an extended arm of SecurityBoat, executing rigorous penetration tests and red teaming engagements for our clients, collaborating with a network of top-tier ethical hackers and researchers to deliver high-impact security assessments across a variety of industries and technologies.
Responsibilities
- Perform end-to-end penetration testing on Web, Mobile, APIs, Cloud, Network, and/or Active Directory infrastructures.
- Conduct threat modeling and simulate real-world attack scenarios (manual + tool-based).
- Document vulnerabilities with clear PoC, risk impact, CVSS scores, and actionable remediation.
- Stay updated with the latest vulnerabilities, attack vectors, and offensive tooling.
- Collaborate with SecurityBoat’s internal teams for client debriefs, retests, and knowledge sharing.
- Uphold ethical standards and maintain complete confidentiality of client systems and data.
- Join client calls to clarify findings, discuss technical details, or walk through your report.
Requirements
- Technical Skillset (pick at least 2 core areas): Web & API Pentesting (OWASP Top 10, GraphQL, JWT, SSRF, IDOR, etc.), Mobile Security Testing (Android/iOS – static/dynamic), Network & Infrastructure Pentesting (internal, external, firewall bypass, pivoting), Cloud Security (AWS, Azure, GCP misconfigurations, IAM abuse, etc.), Red Teaming & Adversary Simulation (MITRE ATT&CK, C2, initial access, privilege escalation), Active Directory Pentesting (Kerberoasting, ACL abuse, DCSync, GPO misconfigs, etc.).
- Minimum 2+ years of hands-on experience in penetration testing or bug bounty.
- A strong portfolio (CVEs, Hall of Fames, Blogs, or CTF profiles are welcome).
- Availability to work on assigned projects and deliver within given timelines.
- High attention to detail, documentation standards, and ethical conduct.
- Clear communication and professionalism in client interactions.
Nice to have
- Offensive Security Certifications: OSCP, OSWE, OSEP, OSED
- PortSwigger: Burp Suite Certified Practitioner
- eLearnSecurity: eCPPTv2, eWPTXv2, eMAPT
- Red Team: CRTL, CRTO, CRTP, CRTE
- Others: CEH, GPEN, GWAPT, PNPT
Benefits
- Paid per project or hour, based on scope and complexity.
- Priority access to high-quality, recurring pentest engagements.
- Exclusive Red Ops Member badge and profile on SecurityBoat PTaaS platform.
- Early access to tools, research, and community-driven bounty opportunities.
Additional details
- This is a freelance contract, not a full-time role.
- Freelance pentesters are engaged on a project-by-project basis, with most assignments lasting anywhere between 5 days to 2 weeks.
- During short-term engagements, full availability during standard working hours (8 hours/day) is expected to maintain momentum and meet delivery timelines.
- Originally posted on Himalayas