Expert Penetration Tester

Job description

Introduction

At IBM Infrastructure & Technology, we design and operate the systems that keep the world running. From high-resiliency mainframes and hybrid cloud platforms to networking, automation, and site reliability. Our teams ensure the performance, security, and scalability that clients and industries depend on every day. Working in Infrastructure & Technology means tackling complex challenges with curiosity and collaboration. You’ll work with diverse technologies and colleagues worldwide to deliver resilient, future-ready solutions that power innovation.

With continuous learning, career growth, and a supportive culture, IBM provides the opportunities to build expertise and shape the infrastructure that drives progress.

Your role and responsibilities

A Penetration Tester with deep technical expertise in the processes, procedures, tools and methodology for assessing IT Security risk. The role requires an individual who can independently visualize the network topology from information provided, prepare tests, conduct hacker simulations and demonstrate the likelihood of data compromise via 'proof of concept exploitation' of a given vulnerability. Further to the tests, to be able to clearly describe the problem, the concerns and provide recommendations to fix.

Required technical and professional expertise

Candidates will need to pass a Penetration Testing skills evaluation test.

• Penetration Testing Experience with operating systems, web applications and network infrastructure. Experience with using Penetration Testing Tools. e.g. NMap, Nessus, Metasploit, BurpSuite, Nikto, Tcpdump.

Required certification

OSCP or higher Offensive Security Qualification

AI Skills

• Ability to work with LLMs, Agentic, Tools, MCP / Administrator level knowledge of Server Operating Systems specifically Unix and Windows.
• Intricate technical knowledge of TCP/IP Networking/Routing, Intranet / Internet Architectures and Segregation Technologies/VLANs, Firewalls, Intrusion Detection, Intrusion Prevention, SQL Databases 'Ability to test web technologies e.g. web applications, containers, container managers.
• Programming ability to create, read and modify exploit code to achieve system penetration. C, C++, Java, C#, scripting knowledge is an asset.
• Ability to document and present the penetration testing results including recommendations to fix. Preferred technical and professional experience
• Penetration Testing Experience with operating systems, web applications and network infrastructure.
• Experience with using Penetration Testing Tools. e.g. NMap, Nessus, Metasploit, BurpSuite, Nikto, Tcpdump.

Required certification

• OSCP or higher Offensive Security Qualification

AI Skills

• Ability to work with LLMs, Agentic, Tools, MCP
• Administrator level knowledge of Server Operating Systems specifically Unix and Windows.
• Intricate technical knowledge of TCP/IP Networking/Routing, Intranet / Internet Architectures and Segregation Technologies/VLANs, Firewalls, Intrusion Detection, Intrusion Prevention, SQL Databases
• Ability to test web technologies e.g. web applications, containers, container managers
• Ability to document and present the penetration testing results including recommendations to fix. IBM is committed to creating a diverse environment and is proud to be an equal-opportunity employer.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, gender, gender identity or expression, sexual orientation, national origin, caste, genetics, pregnancy, disability, neurodivergence, age, veteran status, or other characteristics. IBM is also committed to compliance with all fair employment practices regarding citizenship and immigration status.