Penetration Tester

Job Description: - Perform penetration testing of web applications, mobile applications, thick clients, and APIs

• Conduct source code reviews and white-box penetration testing to prove application-flaw impact
• Reverse engineer mobile and thick-client applications
• Chain application flaws into cloud and on-premises Active Directory infrastructure
• Develop detailed reports on findings and remediations
• Debrief findings at technical and executive levels
• Perform SAST and DAST on enterprise, SaaS, and custom in-house applications
• Use scanners and validate or eliminate false positives
• Continuously learn new ways to evade controls and identify overlooked weaknesses

Requirements: - Customer-first mentality and strong communication with clients, project managers, and teammates

• Solid working knowledge of C, C#, Python, Objective-C, Java, JavaScript, SQL, and AngularJS
• Familiarity with XML, JSON, SOAP, REST, and AJAX
• Understanding of AI/LLM weaknesses and application flaws
• Extensive experience using an attack proxy such as Burp Suite
• 3–5 years of penetration testing and consulting experience preferred
• Post-secondary college or university degree
• At least two years of experience with information security-related tasks
• Professional qualification(s): OSCP, OSWE, or BSCP
• OSCP or Burp is mandatory
• Must be located in Florida or Texas
• Strong understanding of OWASP for Web, API, Mobile, and AI/LLM
• Self-motivated, dependable, humble, adaptable, and committed to continuous learning

Benefits: - Competitive compensation

• Paid education and professional development reimbursement for continued learning, certifications and technical growth
• Flexible work environment
• Paid volunteer day each year
• Paid birthday day off
• Paid U.S. public holidays