Senior Penetration Tester / Red Team Consultant

Overview Inabia is seeking a Senior Penetration Tester / Red Team Consultant to join our team on a project-based engagement of up to six months. This is a primarily remote role with occasional onsite meetings in Seattle, WA, focused on delivering high-quality offensive security assessments across enterprise, cloud, and identity environments. The ideal candidate brings proven hands-on experience in adversary simulation, vulnerability exploitation, and technical client communication. Responsibilities Conduct enterprise internal and external penetration tests against network, web application, and API targets Execute Red Team and adversary simulation engagements aligned to MITRE ATT&CK and industry frameworks Perform Active Directory and Entra ID security testing, including privilege escalation and lateral movement techniques Assess Azure and Microsoft 365 environments for security vulnerabilities and misconfigurations Test VPN, SSO/MFA, and remote-access solutions for exploitable weaknesses Validate, exploit, and conduct post-exploitation activities in authorized, controlled engagements Produce clear, actionable technical reports with prioritized remediation recommendations Present findings and risk summaries to technical and non-technical stakeholders Key Qualifications Minimum 3+ years of hands-on penetration testing or offensive security experience (5+ years strongly preferred) Demonstrated expertise in enterprise internal and external penetration testing Experience conducting Red Team and adversary simulation engagements Proficiency in Active Directory and Entra ID security testing Hands-on experience with Azure and Microsoft 365 security assessments Strong skills in network, web application, and API penetration testing Familiarity with VPN, SSO/MFA, and remote-access security testing Deep understanding of privilege escalation and lateral movement techniques Experience with vulnerability validation, exploitation, and post-exploitation workflows Working knowledge of NIST SP 800-115, MITRE ATT&CK, and OWASP methodologies Excellent technical writing skills and ability to present findings clearly to client audiences Preferred Qualifications Active offensive security certification(s) such as OSCP, OSEP, OSWE, GPEN, GXPN, GWAPT, CEH, or equivalent