Senior Penetration Tester [Remote]

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Penetration Tester based in the United States.

This role sits at the heart of a mission-driven cybersecurity program focused on protecting critical digital infrastructure against evolving advanced threats. You will be joining a highly skilled security testing team responsible for enterprise-level penetration testing across web applications, APIs, and complex systems. The environment is fast-paced, technically demanding, and rooted in real operational impact, where your findings directly strengthen national-scale security resilience. You will work closely with engineers, system owners, and security stakeholders to uncover vulnerabilities and validate remediation efforts. The role blends hands-on offensive security work with analytical reporting and advisory responsibilities. It also requires continuous awareness of emerging threat landscapes and attack methodologies. This is an opportunity to apply deep technical expertise in a high-impact, security-sensitive setting where precision and clarity truly matter.

Accountabilities:

In this role, you will lead and execute advanced penetration testing activities across enterprise systems, with a strong focus on identifying vulnerabilities, validating security controls, and improving overall cyber defense posture.

• Conduct end-to-end penetration testing on web applications, APIs, and backend systems, including authentication, authorization, and business logic testing
• Analyze system architecture, network behavior, and application workflows to identify exploitable weaknesses and security gaps
• Simulate advanced persistent threats and adversary tactics to assess system resilience and detection capabilities
• Document findings in detailed technical reports and communicate risks clearly to both technical and non-technical stakeholders
• Collaborate with engineering and security teams to support remediation, validation testing, and security improvement efforts
• Stay current with emerging vulnerabilities, exploit techniques, and offensive security methodologies
• Develop scripts and automation to enhance testing efficiency and repeatability where applicable
• Contribute to security research, proposal efforts, and enterprise cybersecurity initiatives

Requirements

The ideal candidate brings strong hands-on penetration testing experience, deep technical security knowledge, and the ability to communicate complex findings clearly across teams.

• 4–5+ years of experience in cybersecurity with at least 3 years focused on penetration testing, vulnerability assessment, or adversary simulation
• Strong understanding of OWASP Top 10, API Security Top 10, and common web and application attack vectors
• Hands-on experience with tools such as Kali Linux, Burp Suite, Metasploit, and related security frameworks
• Experience testing APIs and web services (REST, SOAP, JSON, XML, token-based authentication)
• Solid understanding of operating systems (Windows, Linux, macOS), Active Directory, and network protocols (TCP/IP, DNS, etc.)
• Ability to produce clear, structured technical reports and communicate findings effectively to diverse audiences
• Familiarity with NIST and FISMA frameworks and compliance requirements
• Basic scripting/automation skills for security testing workflows
• Experience working in collaborative security environments (SOC, red team, or cyber defense operations)
• Bachelor’s degree in a related field or equivalent professional experience
• Active or obtainable Public Trust clearance required

Preferred qualifications include certifications such as OSCP, GPEN, GWAPT, CEH, or similar, as well as experience with exploit development, threat emulation, or advanced persistent threat analysis.

Benefits

• Remote-first work arrangement within the United States
• Competitive annual salary range: $115,000 – $150,000
• Opportunity to support high-impact national cybersecurity initiatives
• Exposure to advanced threat environments and enterprise-scale systems
• Collaborative, mission-driven security engineering culture
• Professional growth in offensive security and advanced penetration testing domains
• Eligibility for clearance sponsorship (subject to approval).

How Jobgether works:

We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.

We appreciate your interest and wish you the best!

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

#LI-CL1

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.