Application Security Penetration Tester

Job Summary

As a key member of the Attack & Pentest team, the full-time Application Security Penetration Tester will validate and prioritize security vulnerabilities across the enterprise, perform retesting of remediated vulnerabilities, and collaborate with engineering teams to ensure effective resolution, all while working remotely.

Key responsibilities

• Triage incoming vulnerability reports, assessing severity and exploitability while documenting findings
• Perform targeted retesting of remediated vulnerabilities to confirm fixes and document results
• Collaborate with development and infrastructure teams to monitor remediation timelines and provide guidance on vulnerabilities

Required qualifications

• High School diploma or equivalent
• 3+ years of hands-on penetration testing experience, including web applications and APIs
• Experience triaging vulnerabilities at scale and familiarity with vulnerability management platforms
• Ability to write clear, reproducible proof-of-concept exploits and remediation validation reports
• Preferred certifications such as OSCP, GPEN, GWAPT, or CEH