ethical hacker

Senior Penetration Tester

Deloitte

Penetration TesterReference Code 4235
 
Country: 
US Locations: USA - Hermitage; USA - Nashville; USA - Tampa
 
Deloitte Global is the engine of the Deloitte network. Our professionals reach across disciplines and borders to develop and lead global initiatives. We deliver strategic programs and services that unite our organization.
 
Work you'll do
 
This role is responsbile for providing penetration testing services through a combination of technology and manual inginuity as part of the Global cyber services organisation for member firms.
 
Responsibilities of this role include: 
Assisting in technical scoping of security testing activities
 
Executing security testing
 
Web Application Penetration Testing
 
Web Services / Application Programming Interface (API) Penetration Testing
 
Network Penetration Testing
 
Mobile Application Penetration Testing
 
Thick Client Penetration Testing
 
Conducting focused research when not deployed on an active project
 
Provide consultative guidance to customers on findings identified in a clear and actionable fashion both in writing and verbally.
 
Enhancing and updating testing methodologies, processes and standards documentation
 
Maintaining proficiency of knowledge through ongoing training paths
 
Proficient at analyzing and understanding complex architecture designs.
 
Ability to effectively communicate what services and capabilities our group can facilitate to our clients.
 
The team
 
Deloitte Technology works at the forefront of technology development and processes to support and protect Deloitte around the world. In this truly global environment, we operate not in what is but rather what can be to help Deloitte deliver and connect with its clients, its communities, and one another in ways not previously conceived.
 
Qualifications
 
Required: 
Experiance using common testing tools like Burp, OWASP ZAP, Metasploit, Postman, Swagger, NMAP, Qualys, SQLMap, others.
 
Experienced with Kali Linux or other dedicated Penetration Testing OS Platform
 
Advance mobile penetration testing, Application Penetration Testing and architectural security principles
 
Familiarity with software security weakness and vulnerabilities
 
Working knowledge of one scripting language and familiarity with at least one software programming language and framework
 
Demonstrated experience working with diverse stakeholders, preferably on a global multi-national basis
 
Ability to manage concurrent initiatives and use effective judgment in prioritization and time management
 
Strong written and verbal communication skills
 
Must be a US Citizen
 
Preferred: 
Certified Ethical Hacker (CEH) Certification
 
Offensive Certified Security Professional (OSCP) Certification
 
Any GIAC Certification (GSEC, GWAB, GPEN, GMOB, GCPN)
 
OWASP Application Security Top 10
 
OWASP API Security Top 10
 
OWASP Thick Client Top 10
 
OWASP LLM Top 10
 
MITRE ATT&CK Framework
 
Cloud Service testing
 
Reverse Engineering
 
Static Application Software Testing (SAST)
 
Dynamic Application Testing (DAST)
 
Experiance of Agentic development and its application to support penetration testing.
 
Our culture
 
At Deloitte Global people are valued and respected for who they are - with opportunities to bring their unique perspectives, talents and passions to business challenges. Our global workspace creates room for individuality and collaboration. Ours is an inclusive, supportive, connected culture with a focus on development, flexibility, and well-being. This culture makes Deloitte Global one of the most rewarding places to work, and to transform your career.
 
Professional development
 
From entry-level employees to senior leaders, we believe in investing in you, helping you identify and hone your unique strengths at every step of your career. We offer opportunities to build new skills, take on leadership opportunities, and connect and grow through mentorship. From on-the-job learning experiences to formal development programs, our professionals have a variety of opportunities to continue to grow throughout their career.
 
Benefits
 
At Deloitte, we value our people and offer employees a broad range of benefits. Our Total Rewards program reflects our continued commitment to lead from the front in everything we do-that's why we take pride in offering a comprehensive variety of programs and resources to support your health and well-being.
 
Recruiting for this role ends on 06/17/2026.

Penetration Tester

Arwen Tech

<div>
 Posted on Mar 06, 2026
 
 
 Title
 
 
 Penetration Tester
 
 
 Apply before
 
 
 Mar 31, 2026
 
 
 City
 
 
 Islamabad
 
 
 
 Responsibilities
 
 
 
 Summary of Job Profile:
 
 
 The Penetration Tester plays a crucial role in proactively identifying security flaws before they can be exploited. This individual will utilize various testing methodologies and tools to simulate real-world attacks, analyze the security posture of systems, and provide actionable recommendations to improve the organization's overall security. A strong understanding of attack techniques and security best practices is essential.
 
 
 
 Essential Duties &amp; Responsibilities
 
 
 
 <ul>
 <li>
 Plan, execute, and manage penetration testing engagements on networks, web applications, mobile applications, and other systems.
 </li>
 <li>
 Utilize a variety of manual and automated testing techniques and tools to identify security vulnerabilities.
 </li>
 <li>
 Simulate real-world attack scenarios to assess the effectiveness of security controls.
 </li>
 <li>
 Analyze test results and prepare detailed reports documenting identified vulnerabilities, their potential impact, and recommended remediation strategies.
 </li>
 <li>
 Communicate findings and recommendations effectively to technical and non-technical audiences.
 </li>
 <li>
 Collaborate with development and security teams to validate and verify the implementation of security fixes.
 </li>
 <li>
 Stay up-to-date on the latest attack techniques, security vulnerabilities, and testing methodologies.
 </li>
 <li>
 Develop and maintain penetration testing methodologies, tools, and scripts.
 </li>
 <li>
 Conduct security assessments and vulnerability assessments in addition to penetration testing.
 </li>
 <li>
 Assist in the development and improvement of security policies and procedures based on testing findings.
 </li>
 <li>
 Provide guidance and mentorship to junior security team members on penetration testing techniques.
 </li>
 <li>
 Participate in security research and contribute to the organization's knowledge base on emerging threats.
 </li>
 <li>
 Document all testing activities and findings in a clear and concise manner.
 </li>
 <li>
 Adhere to ethical hacking principles and maintain confidentiality of testing results.
 
 
 </li>
 </ul>
 
 Requirements
 
 
 
 Knowledge, Skills, Abilities (KSA&rsquo;s) required to successfully perform the job:
 
 
 
 Knowledge
 
 
 
 <ul>
 <li>
 In-depth knowledge of common attack vectors, vulnerabilities (e.g., OWASP Top 10), and exploitation techniques.
 </li>
 <li>
 Strong understanding of network protocols, operating systems, and web application architectures.
 </li>
 <li>
 Knowledge of various penetration testing methodologies and frameworks (e.g., PTES, OWASP Testing Guide).
 </li>
 <li>
 Familiarity with a wide range of security testing tools and techniques (e.g., Nmap, Metasploit, Burp Suite, Kali Linux).
 </li>
 <li>
 Understanding of scripting languages (e.g., Python, Bash, PowerShell) for automation and custom tool development.
 </li>
 <li>
 Knowledge of security best practices and hardening techniques.
 </li>
 <li>
 Understanding of cryptography and its application in security.
 </li>
 <li>
 Awareness of relevant security regulations and compliance standards.
 
 
 </li>
 </ul>
 
 Skills
 
 
 
 <ul>
 <li>
 Proficient in conducting penetration testing on various targets (network, web, mobile).
 </li>
 <li>
 Excellent technical skills in using penetration testing tools and techniques.
 </li>
 <li>
 Ability to write clear and concise technical reports documenting findings and recommendations.
 </li>
 <li>
 Ability to work independently and as part of a team.
 </li>
 <li>
 Strong attention to detail and meticulous approach to testing.
 </li>
 <li>
 Proficient in scripting languages for automation and tool development.
 
 
 </li>
 </ul>
 
 Abilities
 
 
 
 <ul>
 <li>
 Ability to think like an attacker to identify potential weaknesses.
 </li>
 <li>
 Ability to analyze complex systems and identify security flaws.
 </li>
 <li>
 Ability to effectively utilize penetration testing tools and techniques.
 </li>
 <li>
 Ability to clearly articulate technical findings and recommendations in written and verbal reports.
 </li>
 <li>
 Ability to work under pressure and manage time effectively during testing engagements.
 </li>
 <li>
 Ability to maintain ethical standards and confidentiality.
 </li>
 <li>
 Ability to continuously learn and adapt to the evolving threat landscape.
 
 
 </li>
 </ul>
 
 Education, Experience, Licensure, Certification Required For The Position
 
 
 
 <ul>
 <li>
 Bachelor's degree in Computer Science, Information Security, or a related field.
 </li>
 <li>
 5-6 years of experience in penetration testing or a closely related security role.
 </li>
 <li>
 Relevant security certifications such as OSCP, GPEN, GWAPT, or CEH are highly desirable
 
 
 </li>
 </ul>
 
 Competencies Required To Successfully Perform The Job
 
 
 
 Technical Competencies
 
 
 Behavioral/General Competencies
 
 
 <ul>
 <li>
 Network, web, and mobile app penetration testing.
 </li>
 <li>
 Report Writing &amp; Documentation
 </li>
 <li>
 Use of Penetration Testing Tools (Specify Key Tools)
 </li>
 <li>
 Security Assessment Methodologies
 </li>
 <li>
 Scripting (Python, Bash, etc.)
 </li>
 <li>
 Analytical Thinking
 </li>
 <li>
 Problem-Solving
 </li>
 <li>
 Attention to Detail
 </li>
 <li>
 Communication (Written &amp; Verbal)
 
 
 </li>
 </ul>
 
 Benefits
 
 
 
 <ul>
 <li>
 Excellent Salary
 </li>
 <li>
 Fuel Allowance
 </li>
 <li>
 Internet Allowance
 </li>
 <li>
 Medical Insurance
 </li>
 <li>
 Annual Leaves
 </li>
 <li>
 Provident Fund
 </li>
 <li>
 EOBI
 </li>
 <li>
 Annual Bonus
 </li>
 </ul>
</div>

World-class Security

We are seeking a highly skilled Penetration Tester with proven experience in red‑team operations, advanced technical compromise, and deep knowledge of modern computing, mobile, and radio‑frequency ecosystems. This is a project‑to‑project contract role, supporting clients who require realistic, technically sophisticated adversary‑emulation engagements.Role OverviewThe role involves conducting authorised attempts to compromise systems, accounts, devices, and infrastructure using whatever attack paths you determine to be most effective within the agreed scope. Engagements may include identity compromise, cloud intrusion, mobile‑device exploitation, RF‑based assessments, and full red‑team operations. You will be expected to operate autonomously, think creatively, and demonstrate a high level of technical depth across multiple domains.Key Responsibilities<ul><li>	Perform authorised compromise testing against user accounts, cloud identities, email platforms, and online services within defined rules of engagement.</li></ul><ul><li>	Conduct red‑team operations including reconnaissance, initial access, lateral movement, privilege escalation, and data‑access simulation.</li></ul><ul><li>	Assess mobile device security, including architecture analysis, application behaviour, and payload deployment.</li></ul><ul><li>	Execute network, cloud, web application, and API penetration tests.</li></ul><ul><li>	Perform RF and SDR‑based assessments, including analysis of wireless protocols and device communication security.</li></ul><ul><li>	Develop, adapt, and deploy custom payloads, exploits, and tooling.</li></ul><ul><li>	Produce clear, evidence‑driven technical reports and executive summaries.</li></ul><ul><li>	Present findings to technical and non‑technical stakeholders.</li></ul><ul><li>	Maintain up‑to‑date knowledge of attacker TTPs, emerging vulnerabilities, and offensive tooling.</li></ul><ul><li>	Operate strictly within legal and ethical boundaries, following client‑approved scope and engagement rules.</li></ul>Required Experience &amp; Skills<ul><li>	Demonstrated experience in red‑team engagements or advanced offensive security roles.</li></ul><ul><li>	Proven ability to compromise systems and identities using a wide range of technical attack paths.</li></ul><ul><li>	Strong understanding of mobile device architecture, including iOS and Android internals.</li></ul><ul><li>	Experience developing and deploying payloads across multiple platforms.</li></ul><ul><li>	Proficiency with SDR, RF analysis, and wireless protocol assessment.</li></ul><ul><li>	Deep knowledge of Linux, including Ubuntu‑based environments, system internals, and toolchains.</li></ul><ul><li>	Strong programming and scripting ability in languages such as Python, C/C++, PowerShell, Bash, or similar.</li></ul><ul><li>	Familiarity with offensive frameworks such as Cobalt Strike, Metasploit, Burp Suite, BloodHound, Empire, or equivalents.</li></ul><ul><li>	Excellent communication and reporting skills.</li></ul><ul><li>	Relevant certifications (e.g., OSCP, OSEP, OSCE, CRTO, CREST CRT/CCSAS) are advantageous but not required if experience is demonstrably strong.</li></ul>Engagement Model<ul><li>	Contract / Freelance, project‑to‑project.</li></ul><ul><li>	Engagements range from short, targeted compromise tests to multi‑week red‑team operations.</li></ul><ul><li>	Primarily remote, with occasional on‑site work depending on project scope.</li></ul>Ideal CandidateA technically exceptional offensive security professional who can independently identify, design, and execute attack paths across diverse environments. You should be comfortable working with complex systems, emerging technologies, and unconventional vectors, while maintaining the discipline and clarity expected in client‑facing consulting work.Job Types: Full-time, Part-timePay: Rs135,000.00 per monthWork Location: Remote

PingWind

<div>
 
 Location:
 
 Alexandria, Va
 
 
 
 Required Clearance:
 
 Top Secret Clearance
 
 
 
 Certifications:
 
 Holds or is working toward penetration testing and offensive security certifications appropriate for DoD environments, such as CEH, PenTest+, GPEN, OSCP, or equivalent DoD 8570/8140-approved cybersecurity certifications.
 
 
 
 Required Education:
 
 BS/BA degree
 
 
 
 Required Experience:
 
 5 years relevant experience (an additional 4 years experience may be substituted in lieu of degree).
 
 
 
 Position Description:
 
 
 
 PingWind is seeking a Penetration Tester responsible for supporting authorized penetration testing and security assessment activities to identify, validate, and document vulnerabilities in MODES III systems and cloud-hosted environments in accordance with Government cybersecurity requirements.
 
 
 
 Responsibilities:
 
 
 
 <ul>
 <li>
 Supports execution of authorized penetration testing activities against MODES III systems, applications, and cloud environments to identify security weaknesses. (PenTest)
 </li>
 <li>
 Assists with planning, scoping, and execution of penetration tests in coordination with Government stakeholders and senior cybersecurity personnel
 </li>
 <li>
 Conducts technical testing activities, including vulnerability exploitation, validation, and verification, in accordance with approved rules of engagement and security policies
 </li>
 <li>
 Documents penetration testing results, findings, and supporting evidence, contributing to formal reports and risk documentation
 </li>
 <li>
 Supports remediation validation and retesting activities to confirm closure of identified vulnerabilities and risk reduction
 </li>
 <li>
 Follows established ethical hacking standards, testing methodologies, and reporting procedures to ensure compliant and repeatable execution
 
 
 
 </li>
 </ul>
 
 Required Qualifications:
 
 
 
 <ul>
 <li>
 Must hold or be able to obtain and maintain a Top Secret
 </li>
 <li>
 Holds or is working toward penetration testing and offensive security certifications appropriate for DoD environments, such as CEH, PenTest+, GPEN, OSCP, or equivalent DoD 8570/8140-approved cybersecurity certifications
 
 
 
 </li>
 </ul>
 
 Desired Qualifications:
 
 
 
 <ul>
 <li>
 Master&rsquo;s Degree
 
 
 
 </li>
 </ul>
 
 About PingWind
 
 
 
 PingWind is focused on delivering outstanding services to the federal government. We have extensive experience in the fields of cybersecurity, development, IT infrastructure, supply chain management and other professional services such as system design and continuous improvement. PingWind is an SBA certified Service-Disabled Veteran-Owned Small Business (SDVOSB) with offices in Northern Virginia and Huntsville AL.
 
 
 www.PingWind.com
 
 
 Our benefits include:
 
 
 <ul>
 <li>
 Eleven Federal Holidays
 </li>
 <li>
 Paid Time Off accrued each pay period
 </li>
 <li>
 Parental Leave
 </li>
 <li>
 Three medical plan choices with generous employer contribution
 </li>
 <li>
 Dental and Vision Insurance
 </li>
 <li>
 Company paid Short-Term and Long-Term Disability
 </li>
 <li>
 Company paid Life and AD&amp;D Insurance
 </li>
 <li>
 401k with competitive matching and vesting schedule
 </li>
 <li>
 Continuing education assistance
 </li>
 <li>
 Short Term / Long Term Disability &amp; Life Insurance
 </li>
 <li>
 Medical, Dependent Care and Commuter Flexible Spending Accounts
 </li>
 <li>
 Employee Assistance Program
 </li>
 <li>
 Wellness benefits include Calm Health app and WellHub gym subsidy (formerly GymPass)
 </li>
 <li>
 529 College Savings Plan
 </li>
 <li>
 Legal Insurance
 </li>
 <li>
 Pet Insurance
 
 
 
 </li>
 </ul>
 Veterans are encouraged to apply
 
 
 PingWind, Inc. does not discriminate in employment opportunities, terms, and conditions of employment, or practices on the basis of race, age, gender, religious or political beliefs, national origin or heritage, disability, sexual orientation, or any characteristic protected by law.
 
 
 We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.
</div>

PingWind Inc.

<div><div>Location: Alexandria, Va 
Required Clearance: Top Secret Clearance 
Certifications: Holds or is working toward penetration testing and offensive security certifications appropriate for DoD environments, such as CEH, PenTest+, GPEN, OSCP, or equivalent DoD 8570/8140-approved cybersecurity certifications. 
Required Education: BS/BA degree 
Required Experience: 5 years relevant experience (an additional 4 years experience may be substituted in lieu of degree). 

Position Description:

PingWind is seeking a Penetration Tester responsible for supporting authorized penetration testing and security assessment activities to identify, validate, and document vulnerabilities in MODES III systems and cloud-hosted environments in accordance with Government cybersecurity requirements. 

Responsibilities:
<ul><li>Supports execution of authorized penetration testing activities against MODES III systems, applications, and cloud environments to identify security weaknesses. (PenTest).</li><li>Assists with planning, scoping, and execution of penetration tests in coordination with Government stakeholders and senior cybersecurity personnel.</li><li>Conducts technical testing activities, including vulnerability exploitation, validation, and verification, in accordance with approved rules of engagement and security policies.</li><li>Documents penetration testing results, findings, and supporting evidence, contributing to formal reports and risk documentation.</li><li>Supports remediation validation and retesting activities to confirm closure of identified vulnerabilities and risk reduction.</li><li>Follows established ethical hacking standards, testing methodologies, and reporting procedures to ensure compliant and repeatable execution.</li></ul>

Required Qualifications:
<ul><li>Must hold or be able to obtain and maintain a Top Secret.</li><li>Holds or is working toward penetration testing and offensive security certifications appropriate for DoD environments, such as CEH, PenTest+, GPEN, OSCP, or equivalent DoD 8570/8140-approved cybersecurity certifications.</li></ul>

Desired Qualifications:
<ul><li>Master&rsquo;s Degree</li></ul>

About PingWind

PingWind is focused on delivering outstanding services to the federal government. We have extensive experience in the fields of cybersecurity, development, IT infrastructure, supply chain management and other professional services such as system design and continuous improvement. PingWind is an SBA certified Service-Disabled Veteran-Owned Small Business (SDVOSB) with offices in Northern Virginia and Huntsville AL. 
www.PingWind.com

Our benefits include:
<ul><li>Eleven Federal Holidays</li><li>Paid Time Off accrued each pay period</li><li>Parental Leave</li><li>Three medical plan choices with generous employer contribution</li><li>Dental and Vision Insurance</li><li>Company paid Short-Term and Long-Term Disability</li><li>Company paid Life and AD&amp;D Insurance</li><li>401k with competitive matching and vesting schedule</li><li>Continuing education assistance</li><li>Short Term / Long Term Disability &amp; Life Insurance</li><li>Medical, Dependent Care and Commuter Flexible Spending Accounts</li><li>Employee Assistance Program</li><li>Wellness benefits include Calm Health app and WellHub gym subsidy (formerly GymPass)</li><li>529 College Savings Plan</li><li>Legal Insurance</li><li>Pet Insurance</li></ul>

Veterans are encouraged to apply

PingWind, Inc. does not discriminate in employment opportunities, terms, and conditions of employment, or practices on the basis of race, age, gender, religious or political beliefs, national origin or heritage, disability, sexual orientation, or any characteristic protected by law.
</div>
We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.</div>

Search 4747+ Ethical hacker jobs near you this March. New roles added regularly across leading industries. Apply today.

4747 ethical hacker jobs Near Me

Senior Penetration Tester

Penetration Tester

Penetration Tester

Penetration Tester

Penetration Tester

Penetration Tester

Penetration Tester