Immediate need for a talented Security Threat Hunting + Penetration Testing (Red Team). This is a 06-12+ Months contract opportunity with long-term potential and is located in Colombia (Remote). Please review the job description below and contact me ASAP if you are interested.

Job ID: 26-12130

Pay Range: $15 - $18 /hour.

Key Responsibilities: -

- Assist in executing red team engagements, including initial access, lateral movement, and post-exploitation activities
- Support adversary emulation aligned to real-world threat actor behaviors
- Contribute to developing and modifying tooling, scripts, and payloads
- Perform reconnaissance and attack surface mapping of target environments
- Document findings clearly, including attack paths, techniques, and remediation guidance
- Collaborate with blue team and detection engineering to improve defensive visibility
- Stay current with emerging threats, techniques, and vulnerabilities

Key Requirements and Technology Experience:

- We care more about capability and curiosity than years of experience.
- Strong passion for offensive security and ethical hacking specifically binary exploitation or web exploitation focus.
- Demonstrated self-learning and initiative
- Ability to think like an attacker and approach problems creatively
- Solid troubleshooting and problem-solving skills
- Comfortable working in ambiguous or exploratory scenarios
- Demonstrated Interest / Practical Experience (Highly Valued)
- We’re specifically looking for candidates who have done the work on their own, such as:
- Active participation in platforms like:
- Hack The Box / TryHackMe / PortSwigger Labs
- Capture The Flag (CTF)



competitions (individual or team-based)
- Public write-ups, blogs, or GitHub repositories showcasing:
- Exploits or tooling
- Reverse engineering work
- Vulnerability research
- Experience reproducing or analyzing public CVEs
- Contributions to open-source security tools or research
- Maintaining a personal lab environment (Active Directory, cloud, etc.)
- Bug bounty participation or responsible disclosure reports
- Technical Foundations (Expected)
- Basic understanding of:
- Networking (TCP/IP, DNS, HTTP/S)
- Operating systems (Windows & Linux fundamentals)
- Familiarity with common offensive tools (e.g., Burp Suite, Nmap, Metasploit, BloodHound)
- Introductory knowledge of:
- Web application vulnerabilities (OWASP Top 10)
- Authentication, authorization, and identity concepts
- Basic scripting ability (Python, PowerShell, or similar)
- Understanding of computer architecture and assembly language
- Exposure to command-line environments and troubleshooting
- Must have skills: - Experience with Active Directory attack techniques
- Familiarity with cloud environments (Azure, AWS, GCP)
- Reverse engineering or exploit development exposure
- Understanding of detection evasion or endpoint security concepts
- Relevant certifications (e.g., eJPT, PNPT,



OSCP track in progress)
- How to Stand Out
- We strongly encourage applicants to include:
- GitHub, blog, or portfolio
- CTF profiles or rankings
- Write-ups of labs, challenges, or vulnerabilities
- Any original research or tooling

Our client is a leading Food Brand industry , and we are currently interviewing to fill this and other similar contract positions. If you are interested in this position, please apply online for immediate consideration.

Pyramid Consulting, Inc. provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, colour, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws.

By applying to our jobs, you agree to receive calls, AI-generated calls, text messages, or emails from Pyramid Consulting, Inc. and its affiliates, and contracted partners. Frequency varies for text messages. Message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You can reply STOP to cancel and HELP for help. You can access our privacy policy here.

Job Type: Contract
Contract length: 12 months

Application Question(s):

- 1) Do you actively participate in CTFs, Hack The Box, TryHackMe, or similar security labs?
- 2) Do you have hands-on experience with web exploitation, binary exploitation, or vulnerability research?

Work Location: Remote

📌 Security Threat Hunting + Penetration Testing (Red Team) (Colombia)
🏢 Pyramid Consulting
📍 Colombia