Owasp Testing

Owasp Testing Cybersecurity Jobs

11 jobs found

Today

Mid-Level Penetration Tester

SAIC Texas 🇺🇸 Remote

Texas

Today

$60k - $100k/yr Full time Api Penetration Testing Application Security Cloud Penetration Testing

Apply Now

Job Description

SAIC is seeking a Mid-Level Penetration Tester to support an offensive security practice serving state and local government customers. This TX-based remote role focuses on running penetration testing engagements across modern targets, producing clear technical reporting, and helping customers understand risk priorities and remediation options.

Working in a hands-on environment, you will independently lead or support assessments spanning web applications, networks, APIs, mobile apps, wireless environments, and cloud-hosted systems. You will also contribute to internal research, methodology improvements, tool development, and knowledge-sharing, aligned with the NICE Cybersecurity Workforce Framework to strengthen cybersecurity capability growth.

Responsibilities

Independently perform penetration testing engagements against web applications, networks, APIs, mobile applications, wireless environments, and cloud-hosted systems using both black-box and white-box methodologies.
Align testing activities with NIST, OWASP, PTES, and industry-recognized security assessment frameworks.
Develop attack paths, validate vulnerabilities, and demonstrate exploitability while meeting engagement objectives and timelines.
Manage assigned engagements end-to-end, from planning and scoping through execution, reporting, and customer debriefs.
Coordinate with senior team members, project managers, and clients to ensure successful delivery.
Provide technical guidance and mentorship to junior team members when appropriate.
Produce comprehensive technical reports communicating vulnerabilities, business impact, attack scenarios, and remediation recommendations.
Present findings to technical teams, management, and executive stakeholders; support customers in understanding risk priorities and remediation strategies.
Conduct web application security assessments using the OWASP Web Security Testing Guide (WSTG) and OWASP Top 10 methodologies.
Perform API security assessments for REST, GraphQL, SOAP, and modern authentication mechanisms.
Conduct mobile application security testing on iOS and Android platforms.
Participate in source code reviews and secure code assessments as part of white-box engagements.
Use commercial, government, open-source, and custom-developed tools to identify, exploit, and validate vulnerabilities.
Develop and maintain scripts, utilities, and testing methodologies to improve assessment efficiency and effectiveness.
Evaluate emerging attack techniques, vulnerabilities, and security technologies, incorporating findings into team practices.
Serve as a trusted advisor to customers by communicating technical findings in both technical and business-focused terms.
Remain current on evolving threats, offensive security techniques, emerging vulnerabilities, and industry best practices.
Contribute to internal research projects, methodology enhancements, tool development initiatives, and knowledge-sharing activities.
Support cybersecurity capability growth aligned to the NICE Cybersecurity Workforce Framework.

Requirements

Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related field (equivalency through relevant experience will be considered).
Ability to successfully pass a CJIS Criminal Justice background investigation and maintain CJIS eligibility throughout employment.
5+ years of hands-on cybersecurity experience, including 2+ years conducting penetration testing or offensive security assessments.
Strong knowledge of web application security testing methodologies, including OWASP WSTG and OWASP Top 10.
Experience conducting authenticated and unauthenticated network penetration tests.
Proficiency with industry-standard testing tools, including Burp Suite Professional, Nmap, Nessus/Tenable, Metasploit, and similar platforms.
Experience identifying, exploiting, validating, and documenting security vulnerabilities.
Working knowledge of network protocols, operating systems, Active Directory, authentication mechanisms, and common enterprise architectures.
Experience creating professional technical reports and presenting findings to technical and non-technical audiences.
Knowledge of attack frameworks and methodologies, including MITRE ATT&CK, NIST, and PTES.
Strong analytical, troubleshooting, and problem-solving skills.
Industry-recognized penetration testing certifications preferred, such as OSCP, GWAPT, PNPT, GPEN, OSEP, OSWE, PenTest+, eJPT/eCPPT.

Location, Schedule, and Pay

Location: Remote work in TX, US
Schedule: Full-Time
Shift: Day Job
Travel: Yes, 10% of the time
Minimum clearance: None
Clearance level required to obtain: None
Target salary range: $60,001 - $100,000 (USD) per year

Preferred Experience

Experience conducting mobile application security assessments using tools such as Frida, Objection, MobSF, and ADB.
Experience assessing APIs, cloud environments (Azure, AWS, GCP), and containerized applications.
Source code review experience in languages such as Java, C#, Python, JavaScript, or Go.
Familiarity with red team operations, adversary emulation, and attack path analysis.
Experience with scripting or automation using Python, PowerShell, Bash, or similar languages.
Knowledge of cloud security architectures, digital forensics, malware analysis, or reverse engineering.
Experience mentoring junior penetration testers or leading portions of assessment engagements.
Participation in security research, bug bounty programs, Capture-the-Flag competitions, or public vulnerability disclosures.

Technologies: NIST, OWASP, PTES, OWASP Web Security Testing Guide (WSTG), OWASP Top 10, REST, GraphQL, SOAP, NICE Cybersecurity Workforce Framework, MITRE ATT&CK, Burp Suite Professional, Nmap, Nessus, Tenable, Metasploit, OSCP, GWAPT, PNPT, GPEN, OSEP, OSWE, PenTest+, eJPT, eCPPT, Frida, Objection, MobSF, ADB, iOS, Android, Azure, AWS, GCP, Python, PowerShell, Bash, Java, C#, JavaScript, Go

View full job page →

Today

Junior Penetration Tester

SAIC Texas 🇺🇸 Remote

Texas

Today

$60k - $100k/yr Full time Application Security Cybersecurity Tools Information Security

Apply Now

Job Description

SAIC is hiring a Junior Penetration Tester for offensive security engagements supporting a major state and local government customer. This role is built for hands-on growth in web application and network testing, with structured mentorship from senior testers and an emphasis on quality, documentation, and continuous learning. The position is based in Texas (remote), with a salary range of USD 60,001 - 100,000 per year.

What you’ll do

Perform penetration testing across client environments using black box and white box approaches for web, network, and mobile targets, aligned to NIST standards.
Own assigned tasks and workload within engagements, from scoping support through final reporting, supported by guidance and a consistent focus on quality.
Validate vulnerabilities and communicate results through clear, well-structured technical reports that include findings, risk context, and actionable remediation guidance.
Support iOS and Android application security assessments, with room to expand your mobile testing capabilities over time.
Apply knowledge of security architectures, firewalls, network traffic, and access controls to identify and assess weaknesses.
Use COTS, GOTS, and custom tools to scan for, identify, and validate vulnerabilities.
Contribute to research and evaluation of new tools, techniques, and technologies, recommending improvements to the team.
Strengthen your ability to present findings, including walking stakeholders through vulnerability chains and explaining business risk to leadership.
Align development with the NICE Framework and build foundational skills in cybersecurity and digital forensics through mentorship, training, and hands-on practice.
Share learnings with teammates and help improve internal tooling and methodology, supporting skill gap closure across the practice.
Stay current on emerging vulnerabilities, attack techniques, and industry developments, and bring that knowledge back to the team.

What you’ll need

Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field is preferred (not required).
Equivalent hands-on experience (such as labs, CTFs, internships, or personal projects) may be considered in lieu of a degree.
Ability to pass a CJIS Criminal Justice background investigation and maintain CJIS clearance throughout employment.
Foundational knowledge of cybersecurity concepts, including networking, operating systems, and common attack techniques.
Working knowledge of OWASP Web Security Testing Guide (WSTG) and OWASP Top 10, including how to identify and exploit common vulnerabilities in practical or lab settings.
Hands-on familiarity with standard web application testing and vulnerability scanning tools (e.g., Burp Suite and Tenable).
Basic understanding of network security concepts such as firewalls, network traffic, and access controls.
Ability to write clear, organized technical documentation and incorporate feedback to improve report quality.
Strong curiosity, problem-solving skills, and drive to keep learning.
GWAPT and OSCP are strongly preferred.
Candidates holding or actively pursuing PNPT, PenTest+, PJPT, eJPT, OSEP/OSWE/OSED, or GWEB will also be considered.

Technologies you may use

NIST, OWASP Web Security Testing Guide (WSTG), OWASP Top 10, NICE Framework, Burp Suite, Tenable, iOS, Android, COTS, GOTS, GWAPT, OSCP, PNPT, PenTest+, PJPT, eJPT, OSEP, OSWE, OSED, GWEB

Preferred experience

Exposure to mobile application testing concepts and tools such as Frida, Objection, MobSF, and ADB, plus hands-on iOS or Android assessment experience.
Familiarity with API security testing (REST, GraphQL, SOAP).
Exposure to source code review as part of white box testing.
Experience with CTFs, bug bounty programs, home labs, or platforms such as Hack The Box, TryHackMe, or PortSwigger Web Security Academy.
Basic scripting skills (e.g., Python, Bash, PowerShell) to automate tasks.
Introductory exposure to cloud security concepts, digital forensics, or reverse engineering.
Experience presenting technical information to peers or stakeholders, or interest in developing that skill.
Ability to work collaboratively under guidance from senior team members.

View full job page →

19d ago

Senior Penetration Tester

SkyePoint Decisions Beltsville, MD

Beltsville, MD

19d ago

Contract Senior Active Directory Security Application Security

Apply Now

Job Description

SkyePoint Decisions is seeking a Senior Penetration Tester / PenTest Operator to support a Department of State program focused on High Value Asset (HVA) security assessments.

Responsibilities

Lead penetration testing across internal networks, external networks, web applications, enterprise systems, cloud-connected systems, and mission environments.
Support HVA cybersecurity assessments by identifying and communicating exploitable vulnerabilities, validating security control effectiveness, and determining risk to critical systems and data.
Perform network mapping, reconnaissance, vulnerability validation, exploitation, post exploitation analysis, and document attack paths in accordance with approved Rules of Engagement.
Contribute to Rules of Engagement, test plans and objectives, scope inputs and assessment documentation, and update assessment procedures for management and stakeholder approval.
Conduct external testing to determine what an outside attacker may access, exploit, or exfiltrate within approved scope.
Conduct internal testing to evaluate risk from users or systems with different access levels, including privilege escalation, lateral movement, persistence, and Active Directory attack paths.
Support red team and adversary emulation activities, including realistic threat behavior, targeted access objectives, command-and-control simulation, crafted test artifacts, and controlled social engineering when authorized.
Execute web application testing aligned to common vulnerability classes, including broken access control, authentication and authorization weaknesses, injection flaws, cross-site scripting, insecure configuration, and other OWASP Top 10 risks.
Use offensive security tools and frameworks within approved engagement boundaries (e.g., Kali Linux, Burp Suite, Metasploit, Nmap, Nessus, Wireshark, BloodHound, Impacket, Responder, Hashcat, John the Ripper, Cobalt Strike, Sliver).
Drive vulnerability analysis and validation using manual techniques, automated tools, and custom scripts or proof-of-concept code where appropriate.
Support purple team and detection validation by mapping attacker behavior to defensive telemetry, identifying detection gaps, and recommending improvements to SIEM, EDR, and incident response processes.
Analyze logs, endpoint artifacts, and network telemetry during exercises or assessments to validate detection and escalation of adversary behaviors.
Produce clear, evidence-based reports covering findings, affected assets, exploitability, business or mission impact, and prioritized remediation recommendations.
Deliver technical and executive out-briefs to client stakeholders, including system owners, security operations teams, engineering teams, and senior leaders.
Stay current on emerging attack techniques, offensive tooling, detection approaches, and federal cybersecurity requirements to strengthen client security posture.

Requirements

Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related field; additional relevant experience may be considered in lieu of degree.
Minimum of five (5) or more years of hands-on experience in penetration testing, red team operations, adversary emulation, vulnerability assessment, application security testing, cyber operations, or related offensive security work.
ACTIVE and MAINTAINED SECRET Federal or DoD security clearance.
Experience performing internal and external network penetration testing, including reconnaissance, enumeration, exploitation, privilege escalation, lateral movement, and documentation of attack paths.
Experience performing web application penetration testing using manual and automated techniques.
Experience assessing Active Directory environments, Windows and Linux systems, and common enterprise network services.
Experience with tools including Burp Suite, Metasploit, Nmap, Nessus, Kali Linux, Wireshark, BloodHound, Impacket, Responder, Hashcat, John the Ripper, Cobalt Strike, Sliver, or similar tools.
Experience developing test plans, documenting Rules of Engagement, tracking assessment activities, and producing formal penetration test reports.
Ability to explain technical findings, attack paths, business impact, and remediation options to technical and non-technical stakeholders.
Strong written and verbal communication skills, including client-ready deliverables and executive-ready summaries.
Ability to work independently, manage multiple priorities, and collaborate across multidisciplinary teams in complex federal environments.

Technologies

Kali Linux
Burp Suite
Metasploit
Nmap
Nessus
Wireshark
BloodHound
Impacket
Responder
Hashcat
John the Ripper
CrackMapExec
Cobalt Strike
Sliver
Active Directory
OWASP Top 10
SIEM
EDR

Preferred Qualifications

ACTIVE and MAINTAINED TOP SECRET Federal or DoD security clearance.
Experience supporting HVA cybersecurity assessments or federal enterprise penetration testing programs.
One or more relevant offensive security certifications such as OSCP, GPEN, GWAPT, GXPN, GRTP, PenTest+, CEH, GCIH, or similar certification.
Experience with adversary emulation, purple team operations, detection engineering support, or validation of SIEM and EDR detection coverage.
Experience with Cobalt Strike, Sliver, custom payload development, or command-and-control simulation in approved assessment environments.
Experience with cloud security testing across AWS, Azure, or other cloud environments.
Experience supporting incident response, threat hunting, or post-incident analysis.
Experience creating proof-of-concept exploit examples for reports or live demonstrations in controlled, authorized environments.
Experience mentoring junior penetration testers or leading small offensive security workstreams.
Excellent oral and written communication and presentation skills.

Benefits

Certification incentive program
PTO
Floating federal holiday options
Insurance options including HMO and High Deductible plans with Health Savings Accounts [HSAs]
Flex Spending Accounts [FSAs]
Full dental plans
Vision
ST/LT disability
Life insurance
401k matched

Compensation

Salary Range: TBD
Salary is determined by location, work schedule, education, knowledge, skills, competencies, experience, contract-specific affordability, market data, and business considerations.

What We Can Offer You

Great benefits including multiple insurance options, HSAs, FSAs, full dental, ST/LT disability, life insurance, floating federal holiday options, and 401k matched
Certificate incentive program to reward certifications aligned with business needs
Flexible work environment

Location: Beltsville, MD (onsite)
Job type: contract
Experience: 5+ years

View full job page →

25d ago

Principal Penetration Tester

Microsoft Redmond, WA

Redmond, WA

25d ago

$143k - $304k/yr Full time Ai Security Application Security Cloud Platforms

Apply Now

Job Description

Hybrid role in Redmond, WA with the scope to lead hands-on penetration testing across applications, cloud, networks, hardware, and critical infrastructure OT systems. This Principal Penetration Tester position at Microsoft (CO+I / TCE) combines technical depth, executive-ready communication, and AI-driven automation to scale reconnaissance, discovery, and testing.

What you’ll do

Lead and participate in comprehensive penetration testing across application, cloud, network, hardware, and critical infrastructure operational technology (OT) environments, identifying security vulnerabilities and executing end-to-end adversary emulation within approved rules of engagement.
Operate effectively in uncertain, challenging, and novel environments by identifying unknown risk areas and applying offensive and defensive security operations as appropriate.
Develop relationships that enable streamlined communication and collaboration, advocating for security change across the organization.
Provide strategic guidance on priorities, tactics, evaluation strategies, and methodology development, chaining findings into attack paths that demonstrate operational and business impact.
Organize and direct team work around engagement rules, scoping, executive risk communications, and technical guidance for operations, ensuring remediation of findings is completed according to the defined SLA with on-time reporting and communications.
Create high-quality executive-level verbal and written presentations, explaining technical details to non-technical audiences and delivering data-driven reporting on operations, including risks, vulnerabilities, system information, and remediation plans.
Act as a technical operator across different penetration testing offerings, identifying and exploiting misconfigurations while improving detection capabilities and threat visibility.
Research emerging threats, vulnerabilities, and tools to stay current on the latest attack techniques and security trends.
Mentor team members and partners, fostering curiosity, collaboration, and technical excellence, and partner closely with detection, threat intelligence, and incident response teams to turn findings into actionable detections.
Apply AI and automation to scale reconnaissance, discovery, and testing.

Qualifications

Master’s degree in Statistics, Mathematics, Computer Science, or a related field AND 4+ years of experience in security or a related field
OR Bachelor’s degree in Statistics, Mathematics, Computer Science, or a related field AND 6+ years of experience in security or a related field
OR equivalent experience
Ability to meet Microsoft, customer and/or government security screening requirements, including specialized security screenings such as the Microsoft Cloud Background Check and citizenship verification with a valid passport

Tools and technologies

Experience relevant to C#, Python, C++, Go, PowerShell, .NET, Rust, and penetration testing frameworks and standards including OWASP, MITRE ATT&CK, NIST, with offensive security tools such as OffSec OSCP and OSEP/OSCE3. Familiarity with GPEN, GXPN, GICSP, GRID, and security analytics using KQL, Power BI, and Azure DevOps is beneficial, along with cloud platforms Azure, AWS, GCP. Role also involves AI tooling including Large Language Models (LLMs) and RAG concepts (chunking and embeddings).

Preferred qualifications

6+ years experience identifying security vulnerabilities, software development lifecycle, large-scale computing, modeling, cyber security, and anomaly detection
6+ years experience coding or scripting in languages such as C#, Python, C++, Go, PowerShell, .NET, Rust or comparable languages
Familiarity with security standards and frameworks such as OWASP, MITRE ATT&CK, and NIST
3+ years experience leading a penetration testing team, including hiring, mentoring, and managing full-time and vendor engineers
Relevant offensive security certifications including OffSec OSCP, OSEP/OSCE3, GPEN, GXPN, or similar; OT/ICS certifications such as GICSP or GRID
Experience using open-source and open-weight LLMs, including chunking, embeddings, and RAG techniques
Expertise developing KQL queries, data models, anomaly detection, correlation analytics, and statistical analysis
Deep understanding of Azure, with AWS or GCP experience
Knowledge of OT and Industrial Control Systems (ICS) security
Organizational and program management skills, plus ability to convey complex concepts to diverse audiences
Proficiency with Power BI and Azure DevOps for reporting and tracking

Work location

Preference for candidates who can work from the Redmond, WA office three days per week. Qualified candidates who cannot meet this preference are also welcomed.

Pay information

Typical base pay range across the U.S.: USD $142,800 - $274,800 per year
Base pay range for the San Francisco Bay area and New York City metropolitan area: USD $188,000 - $304,200 per year
Certain roles may be eligible for benefits and other compensation. Additional details: https://careers.microsoft.com/us/en/us-corporate-pay

Application timeline

This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled.

View full job page →

25d ago

Pentest Operator / Penetration Tester

System One Beltsville, MD

Beltsville, MD

25d ago

$120k - $170k/yr Full time Application Security Application Security Testing Cybersecurity Tools

Apply Now

Job Description

System One is seeking a Pentest Operator / Penetration Tester to support and lead penetration testing engagements for High Value Asset (HVA) systems and enterprise security assessments in a Beltsville, MD onsite role. This position involves both internal and external testing, adversary emulation, and executive-ready reporting, backed by the opportunity to apply offensive security skills against mission-critical environments. Salary range: USD 120,000 - 170,000 per year.

Responsibilities

Perform penetration testing across internal networks, external networks, web applications, enterprise systems, cloud-connected systems, and mission environments.
Support HVA cybersecurity assessments by identifying exploitable vulnerabilities, validating security control effectiveness, and determining risk to critical systems and data.
Execute activities including network mapping, reconnaissance, vulnerability validation, exploitation, post-exploitation analysis, and documentation of attack paths within approved Rules of Engagement.
Draft and/or contribute to Rules of Engagement, test plans, scope documentation, and revisions to assessment procedures for management and stakeholder approval.
Conduct external testing to determine what an outside attacker may be able to access, exploit, or exfiltrate within scope.
Conduct internal testing focused on risk from users and systems with different access levels, including privilege escalation, lateral movement, persistence, and Active Directory attack paths.
Support red team and adversary emulation by simulating realistic threat behavior, including targeted access objectives, command-and-control simulation, crafted test artifacts, and controlled social engineering when authorized.
Perform web application testing against common vulnerability classes, including broken access control, authentication and authorization weaknesses, injection flaws, cross-site scripting, insecure configuration, and other OWASP Top 10 risks.
Use offensive security tools and frameworks such as Kali Linux, Burp Suite, Metasploit, Nmap, Nessus, Wireshark, BloodHound, Impacket, Responder, Hashcat, John the Ripper, CrackMapExec, Cobalt Strike, Sliver, and similar tools within approved boundaries.
Perform vulnerability analysis and validation using manual methods, automated tooling, and custom scripts or proof-of-concept code where appropriate.
Support purple team and detection validation by mapping attacker behavior to defensive telemetry, identifying detection gaps, and recommending improvements to SIEM, EDR, and incident response processes.
Analyze logs, endpoint artifacts, and network telemetry during exercises or assessments to validate whether behaviors are detected and escalated appropriately.
Write and present evidence-based reports covering findings, affected assets, exploitability, business or mission impact, and prioritized remediation recommendations.
Deliver technical and executive out-briefs to system owners, security operations, engineering teams, and senior leaders.
Stay current on emerging attack techniques, offensive tooling, detection approaches, and federal cybersecurity requirements to strengthen client security posture.

Requirements

ACTIVE and MAINTAINED TOP SECRET Federal or DoD security clearance.
Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related field (additional relevant experience may be considered in lieu of degree).
Minimum 5 (five) years of hands-on experience in penetration testing, red team operations, adversary emulation, vulnerability assessment, application security testing, cyber operations, or related offensive security work.
Experience with internal and external network penetration testing, including reconnaissance, enumeration, exploitation, privilege escalation, lateral movement, and documentation of attack paths.
Experience conducting web application penetration testing using both manual and automated techniques.
Experience assessing Active Directory environments, Windows and Linux systems, and common enterprise network services.
Experience with common penetration testing tools including Burp Suite, Metasploit, Nmap, Nessus, Kali Linux, Wireshark, BloodHound, Impacket, Responder, Hashcat, John the Ripper, Cobalt Strike, Sliver, or similar tools.
Experience developing test plans, documenting Rules of Engagement, tracking assessment activities, and producing formal penetration test reports.
Ability to explain technical findings, attack paths, business impact, and remediation options to technical and non-technical stakeholders.
Strong written and verbal communication skills for client-ready deliverables and executive-ready summaries.
Ability to work independently, manage multiple priorities, and collaborate across multidisciplinary teams in complex federal environments.

Technologies

Kali Linux, Burp Suite, Metasploit, Nmap, Nessus, Wireshark, BloodHound, Impacket, Responder, Hashcat, John the Ripper, CrackMapExec, Cobalt Strike, Sliver
OWASP Top 10, Active Directory, SIEM, EDR

What Would Be Nice To Have

ACTIVE and MAINTAINED TOP SECRET Federal or DoD security clearance.
Experience supporting HVA cybersecurity assessments or federal enterprise penetration testing programs.
One or more relevant offensive security certifications such as OSCP, GPEN, GWAPT, GXPN, GRTP, PenTest+, CEH, GCIH, or similar certification.
Experience with adversary emulation, purple team operations, detection engineering support, or validation of SIEM and EDR detection coverage.
Experience with Cobalt Strike, Sliver, custom payload development, or command-and-control simulation in approved assessment environments.
Experience with cloud security testing or assessment activities across AWS, Azure, or other cloud environments.
Experience supporting incident response, threat hunting, or post-incident analysis.
Experience creating proof-of-concept exploit examples for reports or live demonstrations in controlled, authorized environments.
Experience mentoring junior penetration testers or leading small offensive security workstreams.
Excellent oral and written communication and presentation skills.

View full job page →

25d ago

Penetration Tester

Koniag Government Services Washington, DC

Washington, DC

25d ago

$140k - $165k/yr Full time Application Security Burp Suite Cybersecurity Tools

Apply Now

Job Description

Koniag Government Services seeks a Penetration Tester to support authorized cybersecurity assessment initiatives for KOS and a government customer in Washington, DC (hybrid).

Responsibilities

Conduct authorized penetration testing on networks, web applications, mobile applications, and infrastructure to uncover security weaknesses.
Perform vulnerability assessments and attempt exploitation of identified vulnerabilities in a controlled, authorized manner.
Develop and execute test plans covering reconnaissance, scanning, exploitation, and post-exploitation activities.
Use industry-standard tools and techniques, including Metasploit, Burp Suite, and Nmap (as well as Nessus) to evaluate system security.
Write custom scripts and tools to automate testing and support exploit development when needed.
Produce detailed technical reports with risk ratings, exploitation methods, and remediation recommendations.
Communicate findings and recommendations to technical teams and leadership in an actionable format.
Collaborate with system administrators, developers, and security teams to validate and remediate vulnerabilities.
Support social engineering assessments, including phishing campaigns, when required.
Maintain awareness of emerging threats, attack vectors, and current penetration testing methodologies.
Participate in red team / blue team exercises and support purple team collaboration efforts.
Ensure all testing activities follow rules of engagement, legal requirements, and organizational policies.
Support continuous monitoring and enterprise-wide security assessment activities.

Requirements

Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or related field from an accredited institution; equivalent experience may be considered in lieu of a degree.
3-5 years of experience in penetration testing, ethical hacking, or offensive security roles.
Demonstrated experience conducting network, web application, and/or wireless penetration tests.
Experience using scripting languages such as Python, Bash, or PowerShell for tool development and automation.
Exceptional communication skills (written and oral) to translate complex technical findings into actionable recommendations for technical and non-technical stakeholders.
Strong understanding of networking protocols, Windows and Linux operating systems, and system architectures.
Hands-on experience with penetration testing tools, including Metasploit, Burp Suite, Nmap, Wireshark, and Kali Linux.
Knowledge of vulnerability frameworks: OWASP Top 10, MITRE ATT&CK, and CVSS scoring.
Experience performing both internal and external penetration tests.
Ability to think creatively and use an attacker mindset to identify non-obvious weaknesses.
Strong grasp of security concepts, including encryption, authentication, and access control mechanisms.
Ability to work independently and manage multiple engagements under tight deadlines.
Strong report writing skills with attention to detail and accuracy.
Ability to obtain and maintain a Public Trust Clearance.

Technologies

Metasploit
Burp Suite
Nmap
Nessus
Python
Bash
PowerShell
Wireshark
Kali Linux
OWASP Top 10
MITRE ATT&CK
CVSS
Windows
Linux
AWS
Azure
GCP
SAST
DAST
NIST 800-53
FedRAMP
RMF
Kubernetes

Benefits

Medical, dental, and vision insurance
401(k) retirement plan
Paid time off
Paid parental leave
Life and disability insurance
Flexible spending accounts
Commuter benefits
Tuition reimbursement

Preferred / Desired Skills

Experience supporting federal government IT environments for security assessments.
Industry certifications such as OSCP, GPEN, CEH, or CISSP.
Experience with cloud security assessments (AWS, Azure, GCP).
Familiarity with red team operations and adversary emulation techniques.
Knowledge of secure coding practices and application security testing (SAST/DAST).
Experience with container and Kubernetes security testing.
Familiarity with compliance frameworks such as NIST 800-53, FedRAMP, or RMF.

Location: Washington, DC (hybrid). Salary: USD 140,000 - 165,000 per year.

View full job page →

29d ago

Ethical Hacker/Penetration Tester Principal

sdna global Albany, NY

Albany, NY

29d ago

$55 - $60/hr Full time Application Security Application Security Engineering Application Security Testing

Apply Now

Job Description

sdna global is hiring a Java application security lead to strengthen products through real-world testing, clear remediation guidance, and incident support. This Ethical Hacker/Penetration Tester Principal role is hybrid in Albany, NY, with travel to Albany twice per month. You will help teams reduce risk across the SDLC by combining hands-on penetration testing with secure coding and vulnerability response.

What you’ll do

Run penetration tests and vulnerability assessments for Java applications and supporting infrastructure.
Find weaknesses in Java code using automated and manual techniques.
Build and use custom exploits to validate application security and simulate attacker tactics.
Partner with Development teams to understand application architecture and surface security gaps early.
Work with Testing teams to integrate security checks into both manual and automation testing.
Provide secure coding guidance, including how to fix vulnerabilities.
Stay current on Java security threats and best practices, and help strengthen secure development processes (SDLC).
Support security incidents tied to Java vulnerabilities, including issues aligned to current published NIST CVE.
Document and report findings with technical details, risk assessment, and recommended solutions.
Communicate recommendations to technical and non-technical audiences.
Contribute to security policies covering Java development and deployment.
Explore penetration avenues by manipulating URLs, query parameters, and application browser data.
Validate and assess browser tokens, including cache manipulation, and evaluate production vs non-production architecture.
Apply MITRE ATT&CK Framework familiarity in testing and validation work.

What you’ll bring

Bachelor’s degree in Computer Science, Information Security, or a related field.
6+ years in a Development and/or Security (Dev Sec) role.
Strong core Java coding experience and knowledge of Java security practices.
Experience in Penetration Testing and/or Ethical Hacking with a focus on Java application security.
Background as an engineer and in Dev Sec work on a large-scale public enterprise application.
Scripting experience and strong problem-solving and analytical skills.
Web application security principles (including OWASP) and knowledge of common vulnerabilities such as SQL injection and XSS.
Penetration testing tooling experience, including Burp Suite and Metasploit.
Familiarity with Fortify on Demand (SAST and DAST tools).
Strong understanding of cryptography and secure communication protocols such as SSL/TLS.
Excellent communication skills and the ability to maintain confidentiality with high ethical standards.

Tools and technologies you’ll work with

Java, Burp Suite, Metasploit
Fortify on Demand, OWASP
SQL injection, XSS
SSL/TLS, MITRE ATT&CK Framework, NIST CVE

Preferred qualifications

Security certifications such as OSCP, GWAPT, GXPN, GPEN, LPT, CEH, CISSP, or other industry security certifications.
Experience with scripting languages such as Python and Bash.
Experience with secure code review for Java.
Familiarity with cloud security testing.
Experience with mobile application penetration testing.
Knowledge of regulations such as HIPAA.
Experience with API testing.