pen tester

Arwen Tech

<div>
 Posted on Mar 06, 2026
 
 
 Title
 
 
 Penetration Tester
 
 
 Apply before
 
 
 Mar 31, 2026
 
 
 City
 
 
 Islamabad
 
 
 
 Responsibilities
 
 
 
 Summary of Job Profile:
 
 
 The Penetration Tester plays a crucial role in proactively identifying security flaws before they can be exploited. This individual will utilize various testing methodologies and tools to simulate real-world attacks, analyze the security posture of systems, and provide actionable recommendations to improve the organization's overall security. A strong understanding of attack techniques and security best practices is essential.
 
 
 
 Essential Duties &amp; Responsibilities
 
 
 
 <ul>
 <li>
 Plan, execute, and manage penetration testing engagements on networks, web applications, mobile applications, and other systems.
 </li>
 <li>
 Utilize a variety of manual and automated testing techniques and tools to identify security vulnerabilities.
 </li>
 <li>
 Simulate real-world attack scenarios to assess the effectiveness of security controls.
 </li>
 <li>
 Analyze test results and prepare detailed reports documenting identified vulnerabilities, their potential impact, and recommended remediation strategies.
 </li>
 <li>
 Communicate findings and recommendations effectively to technical and non-technical audiences.
 </li>
 <li>
 Collaborate with development and security teams to validate and verify the implementation of security fixes.
 </li>
 <li>
 Stay up-to-date on the latest attack techniques, security vulnerabilities, and testing methodologies.
 </li>
 <li>
 Develop and maintain penetration testing methodologies, tools, and scripts.
 </li>
 <li>
 Conduct security assessments and vulnerability assessments in addition to penetration testing.
 </li>
 <li>
 Assist in the development and improvement of security policies and procedures based on testing findings.
 </li>
 <li>
 Provide guidance and mentorship to junior security team members on penetration testing techniques.
 </li>
 <li>
 Participate in security research and contribute to the organization's knowledge base on emerging threats.
 </li>
 <li>
 Document all testing activities and findings in a clear and concise manner.
 </li>
 <li>
 Adhere to ethical hacking principles and maintain confidentiality of testing results.
 
 
 </li>
 </ul>
 
 Requirements
 
 
 
 Knowledge, Skills, Abilities (KSA&rsquo;s) required to successfully perform the job:
 
 
 
 Knowledge
 
 
 
 <ul>
 <li>
 In-depth knowledge of common attack vectors, vulnerabilities (e.g., OWASP Top 10), and exploitation techniques.
 </li>
 <li>
 Strong understanding of network protocols, operating systems, and web application architectures.
 </li>
 <li>
 Knowledge of various penetration testing methodologies and frameworks (e.g., PTES, OWASP Testing Guide).
 </li>
 <li>
 Familiarity with a wide range of security testing tools and techniques (e.g., Nmap, Metasploit, Burp Suite, Kali Linux).
 </li>
 <li>
 Understanding of scripting languages (e.g., Python, Bash, PowerShell) for automation and custom tool development.
 </li>
 <li>
 Knowledge of security best practices and hardening techniques.
 </li>
 <li>
 Understanding of cryptography and its application in security.
 </li>
 <li>
 Awareness of relevant security regulations and compliance standards.
 
 
 </li>
 </ul>
 
 Skills
 
 
 
 <ul>
 <li>
 Proficient in conducting penetration testing on various targets (network, web, mobile).
 </li>
 <li>
 Excellent technical skills in using penetration testing tools and techniques.
 </li>
 <li>
 Ability to write clear and concise technical reports documenting findings and recommendations.
 </li>
 <li>
 Ability to work independently and as part of a team.
 </li>
 <li>
 Strong attention to detail and meticulous approach to testing.
 </li>
 <li>
 Proficient in scripting languages for automation and tool development.
 
 
 </li>
 </ul>
 
 Abilities
 
 
 
 <ul>
 <li>
 Ability to think like an attacker to identify potential weaknesses.
 </li>
 <li>
 Ability to analyze complex systems and identify security flaws.
 </li>
 <li>
 Ability to effectively utilize penetration testing tools and techniques.
 </li>
 <li>
 Ability to clearly articulate technical findings and recommendations in written and verbal reports.
 </li>
 <li>
 Ability to work under pressure and manage time effectively during testing engagements.
 </li>
 <li>
 Ability to maintain ethical standards and confidentiality.
 </li>
 <li>
 Ability to continuously learn and adapt to the evolving threat landscape.
 
 
 </li>
 </ul>
 
 Education, Experience, Licensure, Certification Required For The Position
 
 
 
 <ul>
 <li>
 Bachelor's degree in Computer Science, Information Security, or a related field.
 </li>
 <li>
 5-6 years of experience in penetration testing or a closely related security role.
 </li>
 <li>
 Relevant security certifications such as OSCP, GPEN, GWAPT, or CEH are highly desirable
 
 
 </li>
 </ul>
 
 Competencies Required To Successfully Perform The Job
 
 
 
 Technical Competencies
 
 
 Behavioral/General Competencies
 
 
 <ul>
 <li>
 Network, web, and mobile app penetration testing.
 </li>
 <li>
 Report Writing &amp; Documentation
 </li>
 <li>
 Use of Penetration Testing Tools (Specify Key Tools)
 </li>
 <li>
 Security Assessment Methodologies
 </li>
 <li>
 Scripting (Python, Bash, etc.)
 </li>
 <li>
 Analytical Thinking
 </li>
 <li>
 Problem-Solving
 </li>
 <li>
 Attention to Detail
 </li>
 <li>
 Communication (Written &amp; Verbal)
 
 
 </li>
 </ul>
 
 Benefits
 
 
 
 <ul>
 <li>
 Excellent Salary
 </li>
 <li>
 Fuel Allowance
 </li>
 <li>
 Internet Allowance
 </li>
 <li>
 Medical Insurance
 </li>
 <li>
 Annual Leaves
 </li>
 <li>
 Provident Fund
 </li>
 <li>
 EOBI
 </li>
 <li>
 Annual Bonus
 </li>
 </ul>
</div>

Penetration Tester

World-class Security

We are seeking a highly skilled Penetration Tester with proven experience in red‑team operations, advanced technical compromise, and deep knowledge of modern computing, mobile, and radio‑frequency ecosystems. This is a project‑to‑project contract role, supporting clients who require realistic, technically sophisticated adversary‑emulation engagements.Role OverviewThe role involves conducting authorised attempts to compromise systems, accounts, devices, and infrastructure using whatever attack paths you determine to be most effective within the agreed scope. Engagements may include identity compromise, cloud intrusion, mobile‑device exploitation, RF‑based assessments, and full red‑team operations. You will be expected to operate autonomously, think creatively, and demonstrate a high level of technical depth across multiple domains.Key Responsibilities<ul><li>	Perform authorised compromise testing against user accounts, cloud identities, email platforms, and online services within defined rules of engagement.</li></ul><ul><li>	Conduct red‑team operations including reconnaissance, initial access, lateral movement, privilege escalation, and data‑access simulation.</li></ul><ul><li>	Assess mobile device security, including architecture analysis, application behaviour, and payload deployment.</li></ul><ul><li>	Execute network, cloud, web application, and API penetration tests.</li></ul><ul><li>	Perform RF and SDR‑based assessments, including analysis of wireless protocols and device communication security.</li></ul><ul><li>	Develop, adapt, and deploy custom payloads, exploits, and tooling.</li></ul><ul><li>	Produce clear, evidence‑driven technical reports and executive summaries.</li></ul><ul><li>	Present findings to technical and non‑technical stakeholders.</li></ul><ul><li>	Maintain up‑to‑date knowledge of attacker TTPs, emerging vulnerabilities, and offensive tooling.</li></ul><ul><li>	Operate strictly within legal and ethical boundaries, following client‑approved scope and engagement rules.</li></ul>Required Experience &amp; Skills<ul><li>	Demonstrated experience in red‑team engagements or advanced offensive security roles.</li></ul><ul><li>	Proven ability to compromise systems and identities using a wide range of technical attack paths.</li></ul><ul><li>	Strong understanding of mobile device architecture, including iOS and Android internals.</li></ul><ul><li>	Experience developing and deploying payloads across multiple platforms.</li></ul><ul><li>	Proficiency with SDR, RF analysis, and wireless protocol assessment.</li></ul><ul><li>	Deep knowledge of Linux, including Ubuntu‑based environments, system internals, and toolchains.</li></ul><ul><li>	Strong programming and scripting ability in languages such as Python, C/C++, PowerShell, Bash, or similar.</li></ul><ul><li>	Familiarity with offensive frameworks such as Cobalt Strike, Metasploit, Burp Suite, BloodHound, Empire, or equivalents.</li></ul><ul><li>	Excellent communication and reporting skills.</li></ul><ul><li>	Relevant certifications (e.g., OSCP, OSEP, OSCE, CRTO, CREST CRT/CCSAS) are advantageous but not required if experience is demonstrably strong.</li></ul>Engagement Model<ul><li>	Contract / Freelance, project‑to‑project.</li></ul><ul><li>	Engagements range from short, targeted compromise tests to multi‑week red‑team operations.</li></ul><ul><li>	Primarily remote, with occasional on‑site work depending on project scope.</li></ul>Ideal CandidateA technically exceptional offensive security professional who can independently identify, design, and execute attack paths across diverse environments. You should be comfortable working with complex systems, emerging technologies, and unconventional vectors, while maintaining the discipline and clarity expected in client‑facing consulting work.Job Types: Full-time, Part-timePay: Rs135,000.00 per monthWork Location: Remote

PingWind

<div>
 
 Location:
 
 Alexandria, Va
 
 
 
 Required Clearance:
 
 Top Secret Clearance
 
 
 
 Certifications:
 
 Holds or is working toward penetration testing and offensive security certifications appropriate for DoD environments, such as CEH, PenTest+, GPEN, OSCP, or equivalent DoD 8570/8140-approved cybersecurity certifications.
 
 
 
 Required Education:
 
 BS/BA degree
 
 
 
 Required Experience:
 
 5 years relevant experience (an additional 4 years experience may be substituted in lieu of degree).
 
 
 
 Position Description:
 
 
 
 PingWind is seeking a Penetration Tester responsible for supporting authorized penetration testing and security assessment activities to identify, validate, and document vulnerabilities in MODES III systems and cloud-hosted environments in accordance with Government cybersecurity requirements.
 
 
 
 Responsibilities:
 
 
 
 <ul>
 <li>
 Supports execution of authorized penetration testing activities against MODES III systems, applications, and cloud environments to identify security weaknesses. (PenTest)
 </li>
 <li>
 Assists with planning, scoping, and execution of penetration tests in coordination with Government stakeholders and senior cybersecurity personnel
 </li>
 <li>
 Conducts technical testing activities, including vulnerability exploitation, validation, and verification, in accordance with approved rules of engagement and security policies
 </li>
 <li>
 Documents penetration testing results, findings, and supporting evidence, contributing to formal reports and risk documentation
 </li>
 <li>
 Supports remediation validation and retesting activities to confirm closure of identified vulnerabilities and risk reduction
 </li>
 <li>
 Follows established ethical hacking standards, testing methodologies, and reporting procedures to ensure compliant and repeatable execution
 
 
 
 </li>
 </ul>
 
 Required Qualifications:
 
 
 
 <ul>
 <li>
 Must hold or be able to obtain and maintain a Top Secret
 </li>
 <li>
 Holds or is working toward penetration testing and offensive security certifications appropriate for DoD environments, such as CEH, PenTest+, GPEN, OSCP, or equivalent DoD 8570/8140-approved cybersecurity certifications
 
 
 
 </li>
 </ul>
 
 Desired Qualifications:
 
 
 
 <ul>
 <li>
 Master&rsquo;s Degree
 
 
 
 </li>
 </ul>
 
 About PingWind
 
 
 
 PingWind is focused on delivering outstanding services to the federal government. We have extensive experience in the fields of cybersecurity, development, IT infrastructure, supply chain management and other professional services such as system design and continuous improvement. PingWind is an SBA certified Service-Disabled Veteran-Owned Small Business (SDVOSB) with offices in Northern Virginia and Huntsville AL.
 
 
 www.PingWind.com
 
 
 Our benefits include:
 
 
 <ul>
 <li>
 Eleven Federal Holidays
 </li>
 <li>
 Paid Time Off accrued each pay period
 </li>
 <li>
 Parental Leave
 </li>
 <li>
 Three medical plan choices with generous employer contribution
 </li>
 <li>
 Dental and Vision Insurance
 </li>
 <li>
 Company paid Short-Term and Long-Term Disability
 </li>
 <li>
 Company paid Life and AD&amp;D Insurance
 </li>
 <li>
 401k with competitive matching and vesting schedule
 </li>
 <li>
 Continuing education assistance
 </li>
 <li>
 Short Term / Long Term Disability &amp; Life Insurance
 </li>
 <li>
 Medical, Dependent Care and Commuter Flexible Spending Accounts
 </li>
 <li>
 Employee Assistance Program
 </li>
 <li>
 Wellness benefits include Calm Health app and WellHub gym subsidy (formerly GymPass)
 </li>
 <li>
 529 College Savings Plan
 </li>
 <li>
 Legal Insurance
 </li>
 <li>
 Pet Insurance
 
 
 
 </li>
 </ul>
 Veterans are encouraged to apply
 
 
 PingWind, Inc. does not discriminate in employment opportunities, terms, and conditions of employment, or practices on the basis of race, age, gender, religious or political beliefs, national origin or heritage, disability, sexual orientation, or any characteristic protected by law.
 
 
 We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.
</div>

PingWind Inc.

<div><div>Location: Alexandria, Va 
Required Clearance: Top Secret Clearance 
Certifications: Holds or is working toward penetration testing and offensive security certifications appropriate for DoD environments, such as CEH, PenTest+, GPEN, OSCP, or equivalent DoD 8570/8140-approved cybersecurity certifications. 
Required Education: BS/BA degree 
Required Experience: 5 years relevant experience (an additional 4 years experience may be substituted in lieu of degree). 

Position Description:

PingWind is seeking a Penetration Tester responsible for supporting authorized penetration testing and security assessment activities to identify, validate, and document vulnerabilities in MODES III systems and cloud-hosted environments in accordance with Government cybersecurity requirements. 

Responsibilities:
<ul><li>Supports execution of authorized penetration testing activities against MODES III systems, applications, and cloud environments to identify security weaknesses. (PenTest).</li><li>Assists with planning, scoping, and execution of penetration tests in coordination with Government stakeholders and senior cybersecurity personnel.</li><li>Conducts technical testing activities, including vulnerability exploitation, validation, and verification, in accordance with approved rules of engagement and security policies.</li><li>Documents penetration testing results, findings, and supporting evidence, contributing to formal reports and risk documentation.</li><li>Supports remediation validation and retesting activities to confirm closure of identified vulnerabilities and risk reduction.</li><li>Follows established ethical hacking standards, testing methodologies, and reporting procedures to ensure compliant and repeatable execution.</li></ul>

Required Qualifications:
<ul><li>Must hold or be able to obtain and maintain a Top Secret.</li><li>Holds or is working toward penetration testing and offensive security certifications appropriate for DoD environments, such as CEH, PenTest+, GPEN, OSCP, or equivalent DoD 8570/8140-approved cybersecurity certifications.</li></ul>

Desired Qualifications:
<ul><li>Master&rsquo;s Degree</li></ul>

About PingWind

PingWind is focused on delivering outstanding services to the federal government. We have extensive experience in the fields of cybersecurity, development, IT infrastructure, supply chain management and other professional services such as system design and continuous improvement. PingWind is an SBA certified Service-Disabled Veteran-Owned Small Business (SDVOSB) with offices in Northern Virginia and Huntsville AL. 
www.PingWind.com

Our benefits include:
<ul><li>Eleven Federal Holidays</li><li>Paid Time Off accrued each pay period</li><li>Parental Leave</li><li>Three medical plan choices with generous employer contribution</li><li>Dental and Vision Insurance</li><li>Company paid Short-Term and Long-Term Disability</li><li>Company paid Life and AD&amp;D Insurance</li><li>401k with competitive matching and vesting schedule</li><li>Continuing education assistance</li><li>Short Term / Long Term Disability &amp; Life Insurance</li><li>Medical, Dependent Care and Commuter Flexible Spending Accounts</li><li>Employee Assistance Program</li><li>Wellness benefits include Calm Health app and WellHub gym subsidy (formerly GymPass)</li><li>529 College Savings Plan</li><li>Legal Insurance</li><li>Pet Insurance</li></ul>

Veterans are encouraged to apply

PingWind, Inc. does not discriminate in employment opportunities, terms, and conditions of employment, or practices on the basis of race, age, gender, religious or political beliefs, national origin or heritage, disability, sexual orientation, or any characteristic protected by law.
</div>
We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.</div>

geidea

<div>
 
 Established in 2008,
 
 Geidea
 
 epitomizes customer focused empowerment and commercial success through continuous innovation.
 
 
 
 Geidea
 
 makes best in class digital payment solutions available for all by attracting and leveraging the best creative &amp; entrepreneurial talent in the market
 
 
 Our solutions give any business the chance to get ahead and reach for more no matter their size or maturity.
 
 
 Our technology mirrors our people - Smart, Innovative &amp; Forward Thinking
 
 
 www.geidea.net
 
 
 
 
 
 To maintain a competitive advantage as we grow, we are currently looking for a new "Software Tester".
 
 
 
 
 
 
 Job purpose:
 
 
 
 The purpose of this role is to design &amp; execute test cases and ensure implementation according to the testing guidelines the team in
 
 Geidea
 
 Egypt to ensure delivery of products of high quality.
 
 
 
 
 
 
 Key Responsibilities:
 
 
 <ul>
 <li>
 Design and execute test cases
 </li>
 <li>
 Review test cases assigned to Jr. Testers
 </li>
 <li>
 Prioritize test cases on squad level
 </li>
 <li>
 Report defects
 </li>
 <li>
 Report on testing status and squad releases
 </li>
 <li>
 Ensure testing scope is defined, and ensure coverage of assigned squad
 </li>
 <li>
 Analyse test results, report bugs to Senior Tester or Testing lead
 </li>
 <li>
 Ensure testing is done according to guidelines
 </li>
 <li>
 Ensure accuracy of testing estimates within the assigned squad
 </li>
 <li>
 Ensure testing quality and adherence to testing process and guidelines
 </li>
 <li>
 Define/Develop automation test scripts if needed / requested on squad level
 </li>
 </ul>
 
 
 
 
 
 Qualifications:
 
 
 <ul>
 <li>
 2+ years of experience
 </li>
 <li>
 Bachelor&rsquo;s degree in Engineering or computer science
 </li>
 <li>
 Analyse user stories, use cases, and requirements for validity and feasibility
 </li>
 <li>
 Writing and executing test cases and test plans
 </li>
 <li>
 Detect and track software defects and inconsistencies
 </li>
 <li>
 Execute all levels of testing (System, Integration, and Regression)
 </li>
 <li>
 Good knowledge of relational databases and Microsoft SQL Server
 </li>
 <li>
 API testing knowledge
 </li>
 <li>
 Familiar with Jira
 </li>
 <li>
 Proficient in English
 </li>
 <li>
 Understanding of testing methodologies and tools
 </li>
 <li>
 Experience in Automation is a plus
 </li>
 <li>
 ISTQB Certified
 </li>
 </ul>
 
 
 
 
 
 Our values guide how we think and act - They describe what we care about the most
 
 
 
 
 C
 
 ustomer first - It&rsquo;s embedded in our design thinking and customer service approach
 
 
 
 O
 
 pen - Openness allows us to constantly improve and evolve
 
 
 
 R
 
 eal - No jargon and no excuses!
 
 
 
 B
 
 old - Constantly challenging ourselves and our way of thinking.
 
 
 
 R
 
 esilient &ndash; If we fail, we bounce back stronger than before.
 
 
 
 C
 
 ollaborative - We know that we can achieve a lot more as a team.
 
 
 We are changing lives by constantly striving for a better solution.
 
</div>

Software Testing Engineer

Microsoft

<div>
 
 Overview
 
 
 
 Do you want to help secure some of Microsoft&rsquo;s most critical and high‑impact online services?
 
 
 Are you passionate about solving hard security problems, learning offensive security techniques, and building skills that shape the future of secure cloud computing?
 
 
 The Microsoft Specialized Clouds (MSC) Security Fundamentals group is responsible for securing some of Microsoft&rsquo;s largest and most influential online services. The SERPENT team is looking for a Security Engineer with strong interest in penetration testing, vulnerability assessment, and security research to help strengthen the security posture of these services.
 
 
 This role is an excellent fit for early-in-career engineers who want to build deep expertise in offensive security while contributing to real‑world impact.
 
 
 
 Microsoft&rsquo;s mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond.
 
 
 
 
 Responsibilities
 
 
 
 
 Penetration Testing
 
 
 
 <ul>
 <li>
 Identify security vulnerabilities and variants across critical cloud services.
 </li>
 <li>
 Perform source code reviews, dynamic analysis, and operational security assessments.
 </li>
 <li>
 Validate software quality and adherence to security development practices.
 </li>
 <li>
 Work with engineering and defense teams to improve detection, response, and operational awareness.
 
 
 </li>
 </ul>
 
 Security Automation
 
 
 
 <ul>
 <li>
 Contribute to static and runtime analysis capabilities to detect software security issues.
 </li>
 <li>
 Help design automated analysis workflows for managed code and modern web services.
 </li>
 <li>
 Explore and prototype automation that improves consistency, speed, and depth of security assessments.
 
 
 </li>
 </ul>
 
 Research, Training, and Tool Development
 
 
 
 <ul>
 <li>
 Stay current on offensive security tactics, penetration testing tools, and defensive techniques.
 </li>
 <li>
 Conduct research that supports training and awareness for internal engineering teams.
 </li>
 <li>
 Support innovation efforts across MSC Security, including tooling, methodology improvements, and knowledge sharing.
 
 
 </li>
 </ul>
 
 Qualifications
 
 
 
 
 Required Qualifications:
 
 
 
 <ul>
 <li>
 Bachelor's Degree in Statistics, Mathematics, Computer Science, or related field
 </li>
 <ul>
 <li>
 OR equivalent experience.
 
 </li>
 </ul>
 </ul>
 
 Preferred Qualifications
 
 
 
 <ul>
 <li>
 Master's Degree in Statistics, Mathematics, Computer Science, or related field OR Bachelor's Degree in Statistics, Mathematics, Computer Science, or related field AND 2+ years&rsquo; experience in security or related field OR equivalent experience.
 </li>
 <li>
 Experience with one or more of the following is a plus:
 </li>
 <li>
 Penetration testing
 </li>
 <li>
 Vulnerability research
 </li>
 <li>
 Scripting/automation
 </li>
 <li>
 Threat Hunting
 </li>
 <li>
 Detection Engineering
 
 
 </li>
 </ul>
 Penetration Testing IC2 - The typical base pay range for this role across the U.S. is USD $84,200 - $165,200 per year. There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $109,000 - $180,400 per year.
 
 
 Certain roles may be eligible for benefits and other compensation. Find additional benefits and pay information here:
 
 
 https://careers.microsoft.com/us/en/us-corporate-pay
 
 
 This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled.
 
 
 Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about
 
 requesting accommodations.
 
</div>

Deloitte

Penetration TesterReference Code 4235
 
Country: 
US Locations: USA - Hermitage; USA - Nashville; USA - Tampa
 
Deloitte Global is the engine of the Deloitte network. Our professionals reach across disciplines and borders to develop and lead global initiatives. We deliver strategic programs and services that unite our organization.
 
Work you'll do
 
This role is responsbile for providing penetration testing services through a combination of technology and manual inginuity as part of the Global cyber services organisation for member firms.
 
Responsibilities of this role include: 
Assisting in technical scoping of security testing activities
 
Executing security testing
 
Web Application Penetration Testing
 
Web Services / Application Programming Interface (API) Penetration Testing
 
Network Penetration Testing
 
Mobile Application Penetration Testing
 
Thick Client Penetration Testing
 
Conducting focused research when not deployed on an active project
 
Provide consultative guidance to customers on findings identified in a clear and actionable fashion both in writing and verbally.
 
Enhancing and updating testing methodologies, processes and standards documentation
 
Maintaining proficiency of knowledge through ongoing training paths
 
Proficient at analyzing and understanding complex architecture designs.
 
Ability to effectively communicate what services and capabilities our group can facilitate to our clients.
 
The team
 
Deloitte Technology works at the forefront of technology development and processes to support and protect Deloitte around the world. In this truly global environment, we operate not in what is but rather what can be to help Deloitte deliver and connect with its clients, its communities, and one another in ways not previously conceived.
 
Qualifications
 
Required: 
Experiance using common testing tools like Burp, OWASP ZAP, Metasploit, Postman, Swagger, NMAP, Qualys, SQLMap, others.
 
Experienced with Kali Linux or other dedicated Penetration Testing OS Platform
 
Advance mobile penetration testing, Application Penetration Testing and architectural security principles
 
Familiarity with software security weakness and vulnerabilities
 
Working knowledge of one scripting language and familiarity with at least one software programming language and framework
 
Demonstrated experience working with diverse stakeholders, preferably on a global multi-national basis
 
Ability to manage concurrent initiatives and use effective judgment in prioritization and time management
 
Strong written and verbal communication skills
 
Must be a US Citizen
 
Preferred: 
Certified Ethical Hacker (CEH) Certification
 
Offensive Certified Security Professional (OSCP) Certification
 
Any GIAC Certification (GSEC, GWAB, GPEN, GMOB, GCPN)
 
OWASP Application Security Top 10
 
OWASP API Security Top 10
 
OWASP Thick Client Top 10
 
OWASP LLM Top 10
 
MITRE ATT&CK Framework
 
Cloud Service testing
 
Reverse Engineering
 
Static Application Software Testing (SAST)
 
Dynamic Application Testing (DAST)
 
Experiance of Agentic development and its application to support penetration testing.
 
Our culture
 
At Deloitte Global people are valued and respected for who they are - with opportunities to bring their unique perspectives, talents and passions to business challenges. Our global workspace creates room for individuality and collaboration. Ours is an inclusive, supportive, connected culture with a focus on development, flexibility, and well-being. This culture makes Deloitte Global one of the most rewarding places to work, and to transform your career.
 
Professional development
 
From entry-level employees to senior leaders, we believe in investing in you, helping you identify and hone your unique strengths at every step of your career. We offer opportunities to build new skills, take on leadership opportunities, and connect and grow through mentorship. From on-the-job learning experiences to formal development programs, our professionals have a variety of opportunities to continue to grow throughout their career.
 
Benefits
 
At Deloitte, we value our people and offer employees a broad range of benefits. Our Total Rewards program reflects our continued commitment to lead from the front in everything we do-that's why we take pride in offering a comprehensive variety of programs and resources to support your health and well-being.
 
Recruiting for this role ends on 06/17/2026.

Search 290+ Pen tester jobs near you this March. New roles added regularly across leading industries. Apply today.

290 pen tester jobs Near Me

Penetration Tester

Penetration Tester

Penetration Tester

Penetration Tester

Software Testing Engineer

Penetration Tester

Penetration Tester