Ethical Hacker (remote)

Full-time

We believe information security is fun. We focus on equipping our clients, communities, and employees with knowledge to better protect themselves against risk. Our first core value, we tell the truth, sets a foundation for meaningful relationships and employee growth, ultimately providing the highest quality work in the industry. FRSecure is consistently awarded for outstanding service, industry-leading methodology, organizational growth, and a reputable culture.

FRSecure is comprised of experts on a mission to fix the broken information security industry. We believe that behind every data compromise are people, and everyone deserves to have their data and livelihood protected. It starts with hiring the right people to help us get there. Flexible Work Environment: We empower employees with flexible schedules and remote or hybrid work options.

Access to an Employee Assistance Program (EAP) and a culture that actively promotes mental wellbeing, open communication, and sustainable work practices.

Ongoing learning opportunities and support for professional development to help you grow in your career.

Including medical, dental and vision insurance, health savings, flexible savings and dependent care savings account options, life and disability insurance, 401(k) with employer match up to 4%, and pet insurance.

Generous Time Off: Unlimited paid time off offered to rest and recharge, paid parental leave (6 weeks of 100% regular, straight time weekly pay for non-birthing parents, and 12 weeks of 100% regular, straight time weekly pay for birthing parents), 11 paid holidays, and volunteer time off. This is an eThe Associate Penetration Tester is responsible for providing security posture validation through penetration testing of systems on client networks.

FRSecure is now hiring for 2 Associate Penetration Testers! In this role, you will be responsible for providing security posture validation through penetration testing of systems on client networks. You will work alongside experienced security consultants to identify vulnerabilities, simulate real-world cyberattacks, and help organizations strengthen their security posture before threats become incidents. This role is ideal for a curious, technically driven individual who loves solving puzzles, learning how systems work, and continuously expanding their cybersecurity expertise. Working Location: This position is available on a full-time remote basis in the following states only: Office headquarters and operational business hours are based in Edina, MN (Central Time).

Application Deadline: Execute external penetration tests of client networks which includes reconnaissance, enumerate internet-facing client systems/services, identify vulnerabilities/misconfigurations, create reports based on findings, and deliver reports to clients

Conduct internal penetration tests of client networks by enumerating client networks, identifying vulnerabilities/misconfigurations, creating reports based on findings, and delivering reports to clients

Perform application penetration tests of client applications through reconnaissance, enumerating internet-facing client application, identifying vulnerabilities/misconfigurations, creating reports based on findings, and delivering reports to clients

Document testing methodologies, technical findings, proof-of-concept evidence, attack chains, and business impact in clear, professional reports tailored to both technical and executive audiences

Stay current on emerging threats, attack techniques, tools, and industry trends through independent research, training, certifications, lab work, and participation in knowledge-sharing initiatives

Maintain compliance with internal quality standards, client confidentiality requirements, and applicable industry frameworks and testing methodologies, including OWASP, PTES, NIST, and MITRE ATT&CK

Working Hours: This is a full-time position worked Monday-Friday each week, with the expectation that the responsibilities can be completed in 40 hours each week. FRSecure's primary business hours are Monday-Friday, 8:00am-5:00pm Central Time, however in accordance with the expectations of the position, employees will need to work outside of these hours periodically to accommodate time zones of clients within the United States. Travel: There is minimal travel associated with this position, less than 5%. Occasional travel includes on-site client visits for physical penetration tests (which is not immediate), on-site client projects as needed, as well as any team or company activities.

Associates degree in related field required, or equivalent combination of education, certification and experience

Minimum of 1-2 years of experience managing IT systems in a professional environment required

CEH, Net+ or similar IT or security industry recognized certification preferred

General knowledge of Networks, Linux systems, Windows systems, web applications, and scripting languages

Excellent verbal and written communication skills, with the ability to clearly document technical findings, develop client-ready deliverables, and present complex information in a professional manner

Demonstrated commitment to delivering exceptional customer service through professionalism, responsiveness, and effective management of client relationships throughout assessment engagements

Ability to translate highly technical security concepts, risks, and remediation recommendations into clear, actionable guidance for business stakeholders and non-technical audiences

Strong analytical and critical-thinking skills, with the ability to evaluate security weaknesses, validate findings, and recommend practical risk mitigation strategies

Effective organizational and time management skills with the ability to manage multiple projects, prioritize competing deadlines, and maintain attention to detail in a fast-paced consulting environment

Proficient with all Microsoft Office Suite products

The starting salary range for this position is between $73,000-90,000, not including any bonus, incentive commission, or benefits. Within the range, pay offered is determined by a variety of factors that include but are not limited to job-related skills, experience, and relevant education or training.

Your Recruiter will be able to discuss further details related to commission, bonuses, or other specific salary information related to this position.

Employment and Application Statements

We comply with all federal, state, and local laws providing equal employment opportunities, and all other employment laws and regulations. It is our intent to maintain a work environment that is free of harassment, discrimination, or retaliation because of race, color, creed, religion, national origin, sex, sexual orientation (including transgender status, gender identity or expression), pregnancy (including childbirth, lactation, or related conditions), marital status, disability, public assistance, age, and familial status, genetic information, local commissions activity, veteran status, uniformed servicemember status, or any other status protected by federal, state, or local laws.

FRSecure is dedicated to the fulfillment of this policy in regard to all aspects of employment, including but not limited to recruiting, hiring, placement, transfer, training, promotion, rates of pay, and other compensation, termination, and all other terms, conditions, and privileges of employment.

FRSecure is committed to the full inclusion of all qualified individuals. As part of this commitment, FRSecure will ensure that persons with disabilities are provided reasonable accommodations for the hiring process. If a reasonable accommodation is needed to complete a job application, interview, or otherwise participate in the hiring process, please contact the Human Resources team at View email address on click.appcast.io.