Penetration Tester

This is a fully remote position, open to applicants in Florida, +1 more state.

📋 Description

• Conduct penetration testing on web applications, mobile applications, thick clients, and APIs.

• Execute source code reviews and white-box penetration testing to validate the impact of application flaws.

• Reverse engineer mobile and thick-client applications.

• Integrate application vulnerabilities with cloud and on-premises Active Directory infrastructure when applicable.

• Create comprehensive reports detailing findings and recommended remediations.

• Present findings to both technical and executive audiences.

• Carry out Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST) on enterprise, SaaS, and custom in-house applications.

• Utilize scanners to validate results and eliminate false positives.

• Continuously enhance knowledge on methods to bypass controls and deepen findings.

• Potential opportunity to transition into infrastructure teams at the discretion of management.

⛳️ Requirements

• Proven experience as a developer or application security tester.

• Strong proficiency in C, C#, Python, Objective-C, Java, JavaScript, SQL, and AngularJS.

• Familiarity with XML, JSON, SOAP, REST, and AJAX technologies.

• Knowledge of AI/LLM vulnerabilities and application weaknesses.

• Significant experience with an attack proxy tool such as Burp Suite.

• Preferably 3–5 years of experience in penetration testing and consulting.

• Degree from a post-secondary college or university program.

• Minimum of two years of experience in information security-related roles.

• Relevant professional certifications: OSCP, OSWE, or BSCP.

• OSCP or Burp certification is a requirement.

• Residence in Florida or Texas is mandatory.

• Strong understanding of OWASP guidelines for Web, API, Mobile, and AI/LLM security.

🏝️ Benefits

• Competitive salary and opportunities for advancement.

• Reimbursement for education and professional development.

• Support for certification and technical growth.

• Flexible working environment.

• One paid volunteer day each year.

• Paid day off for your birthday.

• Paid public holidays in the U.S.

• Fully remote work options available within Texas or Florida.