Pentester Ops Specialist

About Us

At Delta Protect we make Cybersecurity and Compliance accessible, automated, and actionable for companies across Latin America. We support our clients with certifications such as ISO 27001, PCI DSS, SOC 2, HIPAA, integrating Pentesting, Threat Detection, Cyber Intelligence, and 24/7 Security Operations with a technical, human, and business approach.

From micro-enterprises to unicorns 🦄, we believe Cybersecurity and Compliance are for everyone.

Our Impact

• +300 companies trust us 🔒
• +500 successful projects delivered ⚙️
• +15K endpoints monitored in real-time 📡
• +1K critical vulnerabilities detected and remediated 💪
• +1M exposed data records detected on the dark web 👁️
• +7 countries with protected clients 🌎
• +6 years transforming cybersecurity in LATAM 🚀

Why join Delta?

Cyberattacks have increased by over 400% since the pandemic 🦠, and businesses are the primary target. Our purpose is clear: protecting LATAM's business landscape from the next cyber pandemic... and we want you to be part of the team building this defense. 🌎

What do we offer you?

• 🧠 High Performance Team: you'll learn more in 3 months than in 1 year elsewhere
• 💰 $1200 USD for your personal development
• 🩺 Major and minor medical insurance
• 💻 Hardware included
• 🚗 Uber transportation for in-person activities
• 🏝️ Flexible, results-oriented vacation
• 🏡 Hybrid work
• ✅ A culture focused on excellence and results-driven

How does the process work?

1. Apply using our form 📩
2. If your profile is a good fit, you'll have an initial exploratory call 🤝
3. We'll send you a technical or practical challenge ⚙️
4. You'll present your solution to the team lead during a video call 💡
5. You'll have a session with the Head of People to assess cultural fit 🧩
6. Finally, you'll speak with Delta Protect's founders 🚀

About the Role

At Delta Protect, we are looking for our next Pentester with a clear mission: to execute, coordinate, and report.

This role will be the operational engine of the dAttackarea. It combines technical pentest execution (Web, Mobile, API, Network, and physical when applicable) with project management, including requirements validation, client communication, schedule coordination, and critical findings review. This isn't a pure pentester or a pure PM role; it's the intersection where both disciplines meet to ensure engagements are delivered on time, with quality, and with satisfied clients.

You will work closely with the Pentest Operations Manager and our Delta Hats. In the initial months, your focus will be on execution and reporting; as you grow, you will take on responsibilities for team coordination, official QA, and leading kickoffs with new clients.

AI is not an add-on; it's a productivity multiplier. You will adopt and leverage the AI and automation tools that dAttack integrates into its operations, applying critical judgment to each output before incorporating it into a report or client response.

Your Key Challenges

• Perform audit-quality pentests. Conduct Web, Mobile, API, Network, and physical infrastructure penetration tests using the dAttack methodology and OWASP / PTES / NIST SP 800-115 frameworks. Deliver findings with reproducible evidence, calculated CVSS severity, and actionable recommendations.
• Manage end-to-end pentest projects. Initiate engagements, coordinate schedules, keep project status synchronized, communicate blockers promptly, and ensure delivery by the committed date.
• Validate requirements and communicate with clients. Review requirements before kickoff, identify technical blockers and unrealistic timelines. Participate in kickoff meetings and results presentations. Translate technical findings into executive language without losing rigor.
• Deliver reports to audit-level quality. Ensure the quality of technical and executive reports, and validation reports (retests), consistent with the dAttack standard. Contribute to the team's QA by technically reviewing critical findings and reports from other pentesters.
• Coordinate the extended Delta Hats team. Assist with engagement assignments based on technical vertical and capacity. Review deliverables, provide feedback, and ensure consistency with the dAttack standard.
• Embrace AI as a force multiplier. Integrate AI and automation tools into daily workflows, with critical validation of each output before incorporating it into a report or client response.
• Contribute to continuous improvement. Identify manual processes suitable for automation, propose improvements to templates and scripts, and contribute to the dAttack catalog from an executor's perspective.

What you'll need to succeed

• 2–4 years of experience conducting penetration tests with real clients, not just CTFs or labs.
• Demonstrable pentest experience Web, Mobile, API, and Network. Physical pentesting and/or social engineering are a plus.
• Experience in pentest project management or professional services: scope validation, resource allocation, schedule tracking, client communication.
• Prior client interaction: kickoffs, presenting findings to technical and executive profiles (CTO, CISO, IT Manager).
• Proficiency in frameworks: OWASP Top 10, OWASP ASVS, PTES, NIST SP 800-115. Severity calculation using CVSS 3.1 / 4.0.
• Operational proficiency with the pentest stack: Burp Suite Pro, Nessus, nmap, Metasploit, among others.
• Writing and delivering technical and executive reports in formal Spanish with audit-level deliverable quality.
• Availability for occasional on-site pentests.
• Comfort with CLI / terminal and a genuine willingness to integrate Claude / AI into daily workflows.
• Intermediate-high English (technical reading, advisories, some client interaction).

Key Skills

• End-to-End Ownership 🎯: Takes full responsibility for engagement delivery. Doesn't wait for deadlines to be set — sets them.
• Executive and Client Communication 🗣️: Translates technical risk into business language. Maintains clarity under pressure.
• Agentic Mindset ⚡: Uses Claude and agents as a force multiplier, but validates all output before signing off.
• Hands-On Technical 🔬: Doesn't just plan; executes the pentest, writes the report, reviews findings.
• Continuous Improvement Mindset 📈: Identifies the next manual process ripe for automation.
• Adaptability & Continuous Learning 📚: The technical stack and vulnerability landscape evolve; the individual evolves with them.
• Integrity and Confidentiality 🔒: Handles critical client information with impeccable ethics.

Certifications

Core (at least one): OSCP (Offensive Security Certified Professional) · eWPTX (eLearnSecurity Web Application Penetration Tester eXtreme) · CEH (Certified Ethical Hacker)

Specialization and Tech Stack (preferred):

• OSWE (Offensive Security Web Expert) for advanced web
• CRTO (Certified Red Team Operator) for Active Directory
• CARTP (Certified Azure Red Team Professional) for cloud
• OSEP (Offensive Security Experienced Penetration Tester)

‍