Pentesting Tools

Pentesting Tools Cybersecurity Jobs

2 jobs found

Today

Senior Penetration Tester

JPMorganChase New York, NY

New York, NY

Today

$157k - $260k/yr Full time Senior Application Security Burp Suite

Apply Now

Job Description

The role focuses on planning, executing, and reporting penetration tests for high-impact banking applications, platforms, and services. You will partner with internal teams to identify vulnerabilities, support remediation, and improve the firm’s security posture.

Penetration Testing Scope

Plan, scope, and execute penetration testing engagements across web applications, APIs, cloud platforms, infrastructure, thick-client applications, and/or mobile applications.
Collect and validate engagement pre-requisites, ensuring required access, documentation, and approvals are in place.
Perform manual and automated testing to identify vulnerabilities, misconfigurations, and security weaknesses using industry-standard tools and custom scripts.

Reporting and Peer Review

Document and communicate findings through comprehensive reports including technical details, risk assessments, and actionable remediation recommendations.
Conduct peer reviews of penetration test reports to ensure accuracy, consistency, and overall quality of deliverables.

Collaboration and Offensive Security Expertise

Collaborate with development, infrastructure, and security teams to clarify findings and support remediation efforts.
Provide subject matter expertise on offensive security during vulnerability resolution and related security activities.

Staying Current and Improving Methodologies

Stay current with emerging threats, vulnerabilities, and attack techniques using threat intelligence, security research, and participation in relevant industry groups.
Contribute to continuous improvement of penetration testing methodologies, tools, and frameworks to enhance effectiveness and alignment with firm strategy and regulatory requirements.

Required Qualifications

5+ years of hands-on penetration testing experience in offensive security, including proven ability to scope, execute, and report on complex engagements.
Expertise in manual penetration testing across web, API, cloud (AWS/Azure/GCP), infrastructure, thick-client, and/or mobile applications (android/iOS), using tools such as Burp Suite, Nmap, Metasploit, and other industry-standard solutions.
Strong understanding of security assessment methodologies such as OWASP Top Ten, NIST Cybersecurity Framework, and other relevant standards.
Ability to identify and explain systemic security issues tied to threats, vulnerabilities, and risks, with clear remediation recommendations.
Exceptional organizational and communication skills, including detailed technical report writing and presenting findings to both technical and non-technical stakeholders.
Experience conducting peer reviews of penetration test reports and mentoring junior testers.
Demonstrated commitment to continuous learning across offensive security trends, tools, and techniques.

Technologies

Burp Suite, Nmap, Metasploit
OWASP Top Ten, NIST Cybersecurity Framework
AWS, Azure, GCP
android, iOS
Python, Java, Rust
Windows, Unix-like operating systems
OSWE, CREST (CRT, CCT), OSCP, OSCE
GXPN, GWAPT, GPEN, GMOB, BSCP

Preferred Qualifications

Knowledge of cybersecurity practices, operational risk management, and incident response methodologies within the US financial services sector, including relevant regulations, threats, and risks.
Proficiency in penetration testing and security concepts for both Windows and Unix-like operating systems.
Experience conducting security-focused source code reviews (e.g., Python, Java, Rust).
Experience in reverse engineering thick-client and mobile applications to identify vulnerabilities.
Relevant certifications such as OSWE, CREST (CRT, CCT), OSCP, OSCE, GXPN, GWAPT, GPEN, GMOB, or BSCP.

Compensation and Benefits

Base salary determined based on the role, experience, skill set, and location.
Commission-based pay and/or discretionary incentive compensation in the form of cash and/or forfeitable equity, based on eligible roles and individual achievements.
Comprehensive health care coverage and on-site health and wellness centers.
A retirement savings plan.
Backup childcare and tuition reimbursement.
Mental health support and financial coaching.

About the Team

Consumer & Community Banking serves customers with services including personal banking, credit cards, mortgages, auto financing, investment advice, small business loans, and payment processing.
The division supports digital solutions and customer satisfaction, including leadership in credit card sales and deposit growth.

Role Details

Location: New York, NY (onsite)
Salary: USD 156,750 - 260,000 per year
Experience: 5+ years

View full job page →

1d ago

Penetration Tester

Connsci Gaithersburg, MD

Gaithersburg, MD

1d ago

$100k - $130k/yr Full time Application Security Cloud Platforms Compliance Testing

Apply Now

Job Description

Connsci is seeking a Penetration Tester to support a government program through hands-on penetration testing, vulnerability and compliance testing, and audit and reporting activities. This position is primarily remote, with travel required on an as-needed basis across Florida and the Washington DC metro region.

Role Overview

The Penetration Tester will perform security testing across networks, systems, endpoints, and cloud environments, with an emphasis on web application, API, and control validation. Responsibilities include documenting findings, preparing audit evidence, and providing recommendations to improve governance, risk, and compliance posture.

Responsibilities

Conduct authenticated vulnerability scans and compliance evaluations across networks, systems, endpoints, and cloud platforms.
Assess agency web applications using OWASP Top 10 and industry best practices.
Perform authenticated and unauthenticated scanning activities using tools such as Burp Suite and OWASP ZAP.
Identify vulnerabilities including injection flaws, authentication weaknesses, session mismanagement, and sensitive data exposure.
Validate application security controls against NIST CSF subcategories.
Evaluate REST and GraphQL APIs for authentication, authorization, and input validation weaknesses.
Conduct fuzzing and misuse testing to identify broken object-level authorization (BOLA) and mass assignment vulnerabilities.
Assess security of API tokens, keys, and session management practices.
Review error handling, data leakage, and logging practices to support compliance requirements.
Execute controlled penetration testing (internal and external) to simulate adversary behaviors and assess defensive effectiveness.
Document findings, prepare audit evidence, and provide recommendations for improving governance, risk, and compliance posture.
Provide technical assistance to Agency OIGs and coordinate with operational IT and security teams to ensure findings are actionable and evidence-based.

Required Qualifications

Bachelor's degree in Cybersecurity, Information Systems, or a related field, or equivalent experience.
At least 5 years of penetration testing experience, including web application testing and API testing.
At least 2 years supporting audit, compliance, or oversight functions, including preparing audit-ready documentation, evidence, and reports for executive leadership.
At least 2 years experience with NIST Cybersecurity Framework, including NIST 800-53.
At least one cybersecurity certification, such as CISSP, CISA, CISM, CCE, CFCE, GCFE, or CEH.

Technology & Tools

OWASP Top 10
Burp Suite
OWASP ZAP
NIST CSF
NIST 800-53
REST
GraphQL
BOLA

Location and Travel

Primarily remote work.
As-needed travel to company and government client site locations across Florida and the Washington DC metro region.
Preference for candidates local to the DC Metro Region or who reside in Florida.

Preferred Qualifications

Master's degree in Cybersecurity, Information Technology, or Computer Science.
7+ years of experience in penetration testing.
3+ years of experience with cloud technologies and Cloud Security Posture Management.

Compensation

USD 100,000 - 130,000 per year.

View full job page →

Pentesting Tools Cybersecurity Jobs

Senior Penetration Tester

Penetration Tester

Get Pentesting Tools Cybersecurity Jobs alerts