security tester

Arwen Tech

<div>
 Posted on Mar 06, 2026
 
 
 Title
 
 
 Penetration Tester
 
 
 Apply before
 
 
 Mar 31, 2026
 
 
 City
 
 
 Islamabad
 
 
 
 Responsibilities
 
 
 
 Summary of Job Profile:
 
 
 The Penetration Tester plays a crucial role in proactively identifying security flaws before they can be exploited. This individual will utilize various testing methodologies and tools to simulate real-world attacks, analyze the security posture of systems, and provide actionable recommendations to improve the organization's overall security. A strong understanding of attack techniques and security best practices is essential.
 
 
 
 Essential Duties &amp; Responsibilities
 
 
 
 <ul>
 <li>
 Plan, execute, and manage penetration testing engagements on networks, web applications, mobile applications, and other systems.
 </li>
 <li>
 Utilize a variety of manual and automated testing techniques and tools to identify security vulnerabilities.
 </li>
 <li>
 Simulate real-world attack scenarios to assess the effectiveness of security controls.
 </li>
 <li>
 Analyze test results and prepare detailed reports documenting identified vulnerabilities, their potential impact, and recommended remediation strategies.
 </li>
 <li>
 Communicate findings and recommendations effectively to technical and non-technical audiences.
 </li>
 <li>
 Collaborate with development and security teams to validate and verify the implementation of security fixes.
 </li>
 <li>
 Stay up-to-date on the latest attack techniques, security vulnerabilities, and testing methodologies.
 </li>
 <li>
 Develop and maintain penetration testing methodologies, tools, and scripts.
 </li>
 <li>
 Conduct security assessments and vulnerability assessments in addition to penetration testing.
 </li>
 <li>
 Assist in the development and improvement of security policies and procedures based on testing findings.
 </li>
 <li>
 Provide guidance and mentorship to junior security team members on penetration testing techniques.
 </li>
 <li>
 Participate in security research and contribute to the organization's knowledge base on emerging threats.
 </li>
 <li>
 Document all testing activities and findings in a clear and concise manner.
 </li>
 <li>
 Adhere to ethical hacking principles and maintain confidentiality of testing results.
 
 
 </li>
 </ul>
 
 Requirements
 
 
 
 Knowledge, Skills, Abilities (KSA&rsquo;s) required to successfully perform the job:
 
 
 
 Knowledge
 
 
 
 <ul>
 <li>
 In-depth knowledge of common attack vectors, vulnerabilities (e.g., OWASP Top 10), and exploitation techniques.
 </li>
 <li>
 Strong understanding of network protocols, operating systems, and web application architectures.
 </li>
 <li>
 Knowledge of various penetration testing methodologies and frameworks (e.g., PTES, OWASP Testing Guide).
 </li>
 <li>
 Familiarity with a wide range of security testing tools and techniques (e.g., Nmap, Metasploit, Burp Suite, Kali Linux).
 </li>
 <li>
 Understanding of scripting languages (e.g., Python, Bash, PowerShell) for automation and custom tool development.
 </li>
 <li>
 Knowledge of security best practices and hardening techniques.
 </li>
 <li>
 Understanding of cryptography and its application in security.
 </li>
 <li>
 Awareness of relevant security regulations and compliance standards.
 
 
 </li>
 </ul>
 
 Skills
 
 
 
 <ul>
 <li>
 Proficient in conducting penetration testing on various targets (network, web, mobile).
 </li>
 <li>
 Excellent technical skills in using penetration testing tools and techniques.
 </li>
 <li>
 Ability to write clear and concise technical reports documenting findings and recommendations.
 </li>
 <li>
 Ability to work independently and as part of a team.
 </li>
 <li>
 Strong attention to detail and meticulous approach to testing.
 </li>
 <li>
 Proficient in scripting languages for automation and tool development.
 
 
 </li>
 </ul>
 
 Abilities
 
 
 
 <ul>
 <li>
 Ability to think like an attacker to identify potential weaknesses.
 </li>
 <li>
 Ability to analyze complex systems and identify security flaws.
 </li>
 <li>
 Ability to effectively utilize penetration testing tools and techniques.
 </li>
 <li>
 Ability to clearly articulate technical findings and recommendations in written and verbal reports.
 </li>
 <li>
 Ability to work under pressure and manage time effectively during testing engagements.
 </li>
 <li>
 Ability to maintain ethical standards and confidentiality.
 </li>
 <li>
 Ability to continuously learn and adapt to the evolving threat landscape.
 
 
 </li>
 </ul>
 
 Education, Experience, Licensure, Certification Required For The Position
 
 
 
 <ul>
 <li>
 Bachelor's degree in Computer Science, Information Security, or a related field.
 </li>
 <li>
 5-6 years of experience in penetration testing or a closely related security role.
 </li>
 <li>
 Relevant security certifications such as OSCP, GPEN, GWAPT, or CEH are highly desirable
 
 
 </li>
 </ul>
 
 Competencies Required To Successfully Perform The Job
 
 
 
 Technical Competencies
 
 
 Behavioral/General Competencies
 
 
 <ul>
 <li>
 Network, web, and mobile app penetration testing.
 </li>
 <li>
 Report Writing &amp; Documentation
 </li>
 <li>
 Use of Penetration Testing Tools (Specify Key Tools)
 </li>
 <li>
 Security Assessment Methodologies
 </li>
 <li>
 Scripting (Python, Bash, etc.)
 </li>
 <li>
 Analytical Thinking
 </li>
 <li>
 Problem-Solving
 </li>
 <li>
 Attention to Detail
 </li>
 <li>
 Communication (Written &amp; Verbal)
 
 
 </li>
 </ul>
 
 Benefits
 
 
 
 <ul>
 <li>
 Excellent Salary
 </li>
 <li>
 Fuel Allowance
 </li>
 <li>
 Internet Allowance
 </li>
 <li>
 Medical Insurance
 </li>
 <li>
 Annual Leaves
 </li>
 <li>
 Provident Fund
 </li>
 <li>
 EOBI
 </li>
 <li>
 Annual Bonus
 </li>
 </ul>
</div>

Penetration Tester

ICE Consulting - Managed IT & Cybersecurity for Life Sciences

<div>
 
 Job Overview
 
 
 
 We are looking for a motivated and skilled
 
 Penetration Tester with
 
 hands-on experience in
 
 Active Directory, Network, and Web Application penetration testing
 
 . The ideal candidate should be able to identify security vulnerabilities, misconfigurations, and weaknesses across enterprise environments and provide actionable recommendations to improve the organization's security posture.
 
 
 In addition to traditional penetration testing, the candidate will participate in purple-team
 
 exercises
 
 , collaborating with defensive teams to simulate real-world attack scenarios and strengthen detection and response capabilities. An interest in
 
 SOC operations, monitoring, and threat detection
 
 will be considered a strong advantage.
 
 
 
 Key Responsibilities
 
 
 
 <ul>
 <li>
 Perform Active Directory penetration testing to identify privilege escalation paths, insecure configurations, and potential lateral movement opportunities
 </li>
 <li>
 Conduct internal and external network penetration tests to identify vulnerabilities and weaknesses within the enterprise infrastructure
 </li>
 <li>
 Perform web application penetration testing, including authentication testing, input validation, session management, and business logic testing
 </li>
 <li>
 Identify and analyze security misconfigurations across systems, services, and network infrastructure
 </li>
 <li>
 Conduct security audits and configuration reviews to identify gaps against security best practices and industry standards
 </li>
 <li>
 Perform risk assessments by evaluating vulnerabilities, misconfigurations, and their potential business impact
 </li>
 <li>
 Document security findings, misconfigurations, and vulnerabilities with clear risk ratings and remediation guidance
 </li>
 <li>
 Participate in purple team engagements by simulating attacker techniques and helping SOC teams improve detection and response capabilities
 </li>
 <li>
 Support threat simulation exercises based on real-world attack techniques and frameworks such as MITRE ATT&amp;CK
 </li>
 <li>
 Work closely with SOC and defensive teams to improve alerting, monitoring, and threat detection use cases
 </li>
 <li>
 Assist in validating remediation efforts by performing retesting and verification of fixes
 </li>
 <li>
 Prepare technical and executive-level reports summarizing findings, risks, and recommended mitigation strategies
 
 
 </li>
 </ul>
 
 Requirements
 
 
 
 
 Required Skills &amp; Experience
 
 
 
 <ul>
 <li>
 Hands-on experience in Active Directory security assessments and penetration testing
 </li>
 <li>
 Strong knowledge of network penetration testing methodologies
 </li>
 <li>
 Experience in web application security testing (OWASP Top 10)
 </li>
 <li>
 Understanding of security configuration reviews and misconfiguration analysis
 </li>
 <li>
 Experience performing vulnerability validation and risk analysis
 </li>
 <li>
 Hands-on experience with tools such as:
 </li>
 <li>
 Nmap
 </li>
 <li>
 Burp Suite
 </li>
 <li>
 Metasploit
 </li>
 <li>
 BloodHound
 </li>
 <li>
 Impacket
 </li>
 <li>
 CrackMapExec
 </li>
 <li>
 Strong understanding of Windows security architecture and AD attack techniques
 </li>
 <li>
 Knowledge of network protocols, authentication mechanisms, and common attack vectors
 
 
 </li>
 </ul>
 
 Nice to Have
 
 
 
 <ul>
 <li>
 Experience with Purple Team exercises
 </li>
 <li>
 Exposure to SOC operations, SIEM platforms, or security monitoring
 </li>
 <li>
 Familiarity with MITRE ATT&amp;CK framework
 </li>
 <li>
 Scripting knowledge (Python, PowerShell, Bash)
 </li>
 <li>
 Exposure to cloud security assessments (Azure / AWS)
 
 
 </li>
 </ul>
 
 Preferred Certifications (Optional)
 
 
 
 <ul>
 <li>
 PNPT
 </li>
 <li>
 eCPPT
 </li>
 <li>
 GPEN / GWAPT
 
 
 </li>
 </ul>
 
 Soft Skills
 
 
 
 <ul>
 <li>
 Strong analytical and problem-solving mindset
 </li>
 <li>
 Ability to clearly communicate technical risks and remediation steps
 </li>
 <li>
 Good documentation and reporting skills
 </li>
 <li>
 Ability to collaborate with both offensive and defensive security teams
 </li>
 <li>
 Strong curiosity and passion for continuous learning in cybersecurity
 </li>
 </ul>
</div>

PingWind

<div>
 
 Location:
 
 Alexandria, Va
 
 
 
 Required Clearance:
 
 Top Secret Clearance
 
 
 
 Certifications:
 
 Holds or is working toward penetration testing and offensive security certifications appropriate for DoD environments, such as CEH, PenTest+, GPEN, OSCP, or equivalent DoD 8570/8140-approved cybersecurity certifications.
 
 
 
 Required Education:
 
 BS/BA degree
 
 
 
 Required Experience:
 
 5 years relevant experience (an additional 4 years experience may be substituted in lieu of degree).
 
 
 
 Position Description:
 
 
 
 PingWind is seeking a Penetration Tester responsible for supporting authorized penetration testing and security assessment activities to identify, validate, and document vulnerabilities in MODES III systems and cloud-hosted environments in accordance with Government cybersecurity requirements.
 
 
 
 Responsibilities:
 
 
 
 <ul>
 <li>
 Supports execution of authorized penetration testing activities against MODES III systems, applications, and cloud environments to identify security weaknesses. (PenTest)
 </li>
 <li>
 Assists with planning, scoping, and execution of penetration tests in coordination with Government stakeholders and senior cybersecurity personnel
 </li>
 <li>
 Conducts technical testing activities, including vulnerability exploitation, validation, and verification, in accordance with approved rules of engagement and security policies
 </li>
 <li>
 Documents penetration testing results, findings, and supporting evidence, contributing to formal reports and risk documentation
 </li>
 <li>
 Supports remediation validation and retesting activities to confirm closure of identified vulnerabilities and risk reduction
 </li>
 <li>
 Follows established ethical hacking standards, testing methodologies, and reporting procedures to ensure compliant and repeatable execution
 
 
 
 </li>
 </ul>
 
 Required Qualifications:
 
 
 
 <ul>
 <li>
 Must hold or be able to obtain and maintain a Top Secret
 </li>
 <li>
 Holds or is working toward penetration testing and offensive security certifications appropriate for DoD environments, such as CEH, PenTest+, GPEN, OSCP, or equivalent DoD 8570/8140-approved cybersecurity certifications
 
 
 
 </li>
 </ul>
 
 Desired Qualifications:
 
 
 
 <ul>
 <li>
 Master&rsquo;s Degree
 
 
 
 </li>
 </ul>
 
 About PingWind
 
 
 
 PingWind is focused on delivering outstanding services to the federal government. We have extensive experience in the fields of cybersecurity, development, IT infrastructure, supply chain management and other professional services such as system design and continuous improvement. PingWind is an SBA certified Service-Disabled Veteran-Owned Small Business (SDVOSB) with offices in Northern Virginia and Huntsville AL.
 
 
 www.PingWind.com
 
 
 Our benefits include:
 
 
 <ul>
 <li>
 Eleven Federal Holidays
 </li>
 <li>
 Paid Time Off accrued each pay period
 </li>
 <li>
 Parental Leave
 </li>
 <li>
 Three medical plan choices with generous employer contribution
 </li>
 <li>
 Dental and Vision Insurance
 </li>
 <li>
 Company paid Short-Term and Long-Term Disability
 </li>
 <li>
 Company paid Life and AD&amp;D Insurance
 </li>
 <li>
 401k with competitive matching and vesting schedule
 </li>
 <li>
 Continuing education assistance
 </li>
 <li>
 Short Term / Long Term Disability &amp; Life Insurance
 </li>
 <li>
 Medical, Dependent Care and Commuter Flexible Spending Accounts
 </li>
 <li>
 Employee Assistance Program
 </li>
 <li>
 Wellness benefits include Calm Health app and WellHub gym subsidy (formerly GymPass)
 </li>
 <li>
 529 College Savings Plan
 </li>
 <li>
 Legal Insurance
 </li>
 <li>
 Pet Insurance
 
 
 
 </li>
 </ul>
 Veterans are encouraged to apply
 
 
 PingWind, Inc. does not discriminate in employment opportunities, terms, and conditions of employment, or practices on the basis of race, age, gender, religious or political beliefs, national origin or heritage, disability, sexual orientation, or any characteristic protected by law.
 
 
 We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.
</div>

Booz Allen Hamilton

<div>Enterprise Cybersecurity Penetration Tester<div><div>
The Opportunity:</div><div>
Are you ready to make a meaningful impact at Booz Allen? As a pivotal member of our Enterprise Cybersecurity (ECS) Red Team, you will take on a specialized role as a penetration tester, working directly with new products in development to identify vulnerabilities and reinforce our security posture. This unique opportunity allows you to lead dynamic penetration testing and product assessments, uncovering weaknesses and strengthening the security foundations of our organization. You will thrive in a fast-paced environment where cutting-edge offensive security intersects with strategic advising which drives innovative analysis and actionable solutions for the Booz Enterprise.</div><div>
You&rsquo;ll design and execute end-to-end red and purple team exercises, adhering to established rules of engagement, to reveal and address gaps in our security posture. Your expertise will be applied across cloud native and mobile platforms, ensuring our defenses are resilient and agile. You&rsquo;ll translate complex security concepts to both technical and non-technical stakeholders, including senior executives, making your voice heard at every level.</div><div>
Join a passionate team of cybersecurity professionals at the forefront of research, fostering a culture of innovation, knowledge sharing, and continuous improvement. Embark on a career where your skills and curiosity will help shape the future of security at Booz Allen. Due to the nature of work performed within this facility, U.S. citizenship is required.
Join us. The world can't wait.
</div><div>You Have:</div><div><ul><li>
3+ years of experience conducting penetration tests and security assessments on new or evolving products</li><li>
Experience successfully launching secure products to market and driving adoption among record of target user groups</li><li>
Experience independently leading organized product security testing engagements while fostering strong team collaboration</li><li>
Experience with vulnerability enumeration and exploitation frameworks, including Burp Suite Pro, Metasploit, or Cobalt Strike</li><li>
Knowledge of front-end and back-end frameworks commonly used in modern web development
</li><li>Ability to write comprehensive product security assessment reports and communicating findings to clients and senior leadership</li><li>
Ability to mentor junior-level staff in the latest techniques for product penetration testing and security assessments</li><li>
Bachelor&rsquo;s degree in information security, computer science, product, or application security</li></ul></div><div>
Nice If You Have:</div><div><ul><li>
Experience with testing cloud-hosted solutions
</li><li>Knowledge of Active Directory, Azure, and Amazon Web Services
</li><li>Knowledge of programming languages such as JavaScript, Python, and PHP</li><li>
Ability to operate in a fast-paced work environment, multi-task, and handle truncated delivery deadlines
</li><li>Possession of excellent oral and written communication skills
</li><li>Offensive Security Certified Professional (OSCP) Certification</li></ul></div></div>
Compensation
At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen&rsquo;s benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page.
Salary at Booz Allen is determined by various factors, including but not limited to location, the individual&rsquo;s particular combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements. The projected compensation range for this position is $86,800.00 to $198,000.00 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of Booz Allen&rsquo;s total compensation package for employees. This posting will close within 90 days from the Posting Date.
Identity Statement
As part of the application process, you are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud.
Work Model 
Our people-first culture prioritizes the benefits of flexibility and collaboration, whether that happens in person or remotely.<ul><li>
If this position is listed as remote or hybrid, you&rsquo;ll periodically work from a Booz Allen or client site facility.</li><li>
If this position is listed as onsite, you&rsquo;ll work with colleagues and clients in person, as needed for the specific role.</li></ul>
Commitment to Non-Discrimination
All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local, or international law.</div>

Enterprise Cybersecurity Penetration Tester

World-class Security

We are seeking a highly skilled Penetration Tester with proven experience in red‑team operations, advanced technical compromise, and deep knowledge of modern computing, mobile, and radio‑frequency ecosystems. This is a project‑to‑project contract role, supporting clients who require realistic, technically sophisticated adversary‑emulation engagements.Role OverviewThe role involves conducting authorised attempts to compromise systems, accounts, devices, and infrastructure using whatever attack paths you determine to be most effective within the agreed scope. Engagements may include identity compromise, cloud intrusion, mobile‑device exploitation, RF‑based assessments, and full red‑team operations. You will be expected to operate autonomously, think creatively, and demonstrate a high level of technical depth across multiple domains.Key Responsibilities<ul><li>	Perform authorised compromise testing against user accounts, cloud identities, email platforms, and online services within defined rules of engagement.</li></ul><ul><li>	Conduct red‑team operations including reconnaissance, initial access, lateral movement, privilege escalation, and data‑access simulation.</li></ul><ul><li>	Assess mobile device security, including architecture analysis, application behaviour, and payload deployment.</li></ul><ul><li>	Execute network, cloud, web application, and API penetration tests.</li></ul><ul><li>	Perform RF and SDR‑based assessments, including analysis of wireless protocols and device communication security.</li></ul><ul><li>	Develop, adapt, and deploy custom payloads, exploits, and tooling.</li></ul><ul><li>	Produce clear, evidence‑driven technical reports and executive summaries.</li></ul><ul><li>	Present findings to technical and non‑technical stakeholders.</li></ul><ul><li>	Maintain up‑to‑date knowledge of attacker TTPs, emerging vulnerabilities, and offensive tooling.</li></ul><ul><li>	Operate strictly within legal and ethical boundaries, following client‑approved scope and engagement rules.</li></ul>Required Experience &amp; Skills<ul><li>	Demonstrated experience in red‑team engagements or advanced offensive security roles.</li></ul><ul><li>	Proven ability to compromise systems and identities using a wide range of technical attack paths.</li></ul><ul><li>	Strong understanding of mobile device architecture, including iOS and Android internals.</li></ul><ul><li>	Experience developing and deploying payloads across multiple platforms.</li></ul><ul><li>	Proficiency with SDR, RF analysis, and wireless protocol assessment.</li></ul><ul><li>	Deep knowledge of Linux, including Ubuntu‑based environments, system internals, and toolchains.</li></ul><ul><li>	Strong programming and scripting ability in languages such as Python, C/C++, PowerShell, Bash, or similar.</li></ul><ul><li>	Familiarity with offensive frameworks such as Cobalt Strike, Metasploit, Burp Suite, BloodHound, Empire, or equivalents.</li></ul><ul><li>	Excellent communication and reporting skills.</li></ul><ul><li>	Relevant certifications (e.g., OSCP, OSEP, OSCE, CRTO, CREST CRT/CCSAS) are advantageous but not required if experience is demonstrably strong.</li></ul>Engagement Model<ul><li>	Contract / Freelance, project‑to‑project.</li></ul><ul><li>	Engagements range from short, targeted compromise tests to multi‑week red‑team operations.</li></ul><ul><li>	Primarily remote, with occasional on‑site work depending on project scope.</li></ul>Ideal CandidateA technically exceptional offensive security professional who can independently identify, design, and execute attack paths across diverse environments. You should be comfortable working with complex systems, emerging technologies, and unconventional vectors, while maintaining the discipline and clarity expected in client‑facing consulting work.Job Types: Full-time, Part-timePay: Rs135,000.00 per monthWork Location: Remote

PingWind Inc.

<div><div>Location: Alexandria, Va 
Required Clearance: Top Secret Clearance 
Certifications: Holds or is working toward penetration testing and offensive security certifications appropriate for DoD environments, such as CEH, PenTest+, GPEN, OSCP, or equivalent DoD 8570/8140-approved cybersecurity certifications. 
Required Education: BS/BA degree 
Required Experience: 5 years relevant experience (an additional 4 years experience may be substituted in lieu of degree). 

Position Description:

PingWind is seeking a Penetration Tester responsible for supporting authorized penetration testing and security assessment activities to identify, validate, and document vulnerabilities in MODES III systems and cloud-hosted environments in accordance with Government cybersecurity requirements. 

Responsibilities:
<ul><li>Supports execution of authorized penetration testing activities against MODES III systems, applications, and cloud environments to identify security weaknesses. (PenTest).</li><li>Assists with planning, scoping, and execution of penetration tests in coordination with Government stakeholders and senior cybersecurity personnel.</li><li>Conducts technical testing activities, including vulnerability exploitation, validation, and verification, in accordance with approved rules of engagement and security policies.</li><li>Documents penetration testing results, findings, and supporting evidence, contributing to formal reports and risk documentation.</li><li>Supports remediation validation and retesting activities to confirm closure of identified vulnerabilities and risk reduction.</li><li>Follows established ethical hacking standards, testing methodologies, and reporting procedures to ensure compliant and repeatable execution.</li></ul>

Required Qualifications:
<ul><li>Must hold or be able to obtain and maintain a Top Secret.</li><li>Holds or is working toward penetration testing and offensive security certifications appropriate for DoD environments, such as CEH, PenTest+, GPEN, OSCP, or equivalent DoD 8570/8140-approved cybersecurity certifications.</li></ul>

Desired Qualifications:
<ul><li>Master&rsquo;s Degree</li></ul>

About PingWind

PingWind is focused on delivering outstanding services to the federal government. We have extensive experience in the fields of cybersecurity, development, IT infrastructure, supply chain management and other professional services such as system design and continuous improvement. PingWind is an SBA certified Service-Disabled Veteran-Owned Small Business (SDVOSB) with offices in Northern Virginia and Huntsville AL. 
www.PingWind.com

Our benefits include:
<ul><li>Eleven Federal Holidays</li><li>Paid Time Off accrued each pay period</li><li>Parental Leave</li><li>Three medical plan choices with generous employer contribution</li><li>Dental and Vision Insurance</li><li>Company paid Short-Term and Long-Term Disability</li><li>Company paid Life and AD&amp;D Insurance</li><li>401k with competitive matching and vesting schedule</li><li>Continuing education assistance</li><li>Short Term / Long Term Disability &amp; Life Insurance</li><li>Medical, Dependent Care and Commuter Flexible Spending Accounts</li><li>Employee Assistance Program</li><li>Wellness benefits include Calm Health app and WellHub gym subsidy (formerly GymPass)</li><li>529 College Savings Plan</li><li>Legal Insurance</li><li>Pet Insurance</li></ul>

Veterans are encouraged to apply

PingWind, Inc. does not discriminate in employment opportunities, terms, and conditions of employment, or practices on the basis of race, age, gender, religious or political beliefs, national origin or heritage, disability, sexual orientation, or any characteristic protected by law.
</div>
We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.</div>

Deloitte

Penetration TesterReference Code 4235
 
Country: 
US Locations: USA - Hermitage; USA - Nashville; USA - Tampa
 
Deloitte Global is the engine of the Deloitte network. Our professionals reach across disciplines and borders to develop and lead global initiatives. We deliver strategic programs and services that unite our organization.
 
Work you'll do
 
This role is responsbile for providing penetration testing services through a combination of technology and manual inginuity as part of the Global cyber services organisation for member firms.
 
Responsibilities of this role include: 
Assisting in technical scoping of security testing activities
 
Executing security testing
 
Web Application Penetration Testing
 
Web Services / Application Programming Interface (API) Penetration Testing
 
Network Penetration Testing
 
Mobile Application Penetration Testing
 
Thick Client Penetration Testing
 
Conducting focused research when not deployed on an active project
 
Provide consultative guidance to customers on findings identified in a clear and actionable fashion both in writing and verbally.
 
Enhancing and updating testing methodologies, processes and standards documentation
 
Maintaining proficiency of knowledge through ongoing training paths
 
Proficient at analyzing and understanding complex architecture designs.
 
Ability to effectively communicate what services and capabilities our group can facilitate to our clients.
 
The team
 
Deloitte Technology works at the forefront of technology development and processes to support and protect Deloitte around the world. In this truly global environment, we operate not in what is but rather what can be to help Deloitte deliver and connect with its clients, its communities, and one another in ways not previously conceived.
 
Qualifications
 
Required: 
Experiance using common testing tools like Burp, OWASP ZAP, Metasploit, Postman, Swagger, NMAP, Qualys, SQLMap, others.
 
Experienced with Kali Linux or other dedicated Penetration Testing OS Platform
 
Advance mobile penetration testing, Application Penetration Testing and architectural security principles
 
Familiarity with software security weakness and vulnerabilities
 
Working knowledge of one scripting language and familiarity with at least one software programming language and framework
 
Demonstrated experience working with diverse stakeholders, preferably on a global multi-national basis
 
Ability to manage concurrent initiatives and use effective judgment in prioritization and time management
 
Strong written and verbal communication skills
 
Must be a US Citizen
 
Preferred: 
Certified Ethical Hacker (CEH) Certification
 
Offensive Certified Security Professional (OSCP) Certification
 
Any GIAC Certification (GSEC, GWAB, GPEN, GMOB, GCPN)
 
OWASP Application Security Top 10
 
OWASP API Security Top 10
 
OWASP Thick Client Top 10
 
OWASP LLM Top 10
 
MITRE ATT&CK Framework
 
Cloud Service testing
 
Reverse Engineering
 
Static Application Software Testing (SAST)
 
Dynamic Application Testing (DAST)
 
Experiance of Agentic development and its application to support penetration testing.
 
Our culture
 
At Deloitte Global people are valued and respected for who they are - with opportunities to bring their unique perspectives, talents and passions to business challenges. Our global workspace creates room for individuality and collaboration. Ours is an inclusive, supportive, connected culture with a focus on development, flexibility, and well-being. This culture makes Deloitte Global one of the most rewarding places to work, and to transform your career.
 
Professional development
 
From entry-level employees to senior leaders, we believe in investing in you, helping you identify and hone your unique strengths at every step of your career. We offer opportunities to build new skills, take on leadership opportunities, and connect and grow through mentorship. From on-the-job learning experiences to formal development programs, our professionals have a variety of opportunities to continue to grow throughout their career.
 
Benefits
 
At Deloitte, we value our people and offer employees a broad range of benefits. Our Total Rewards program reflects our continued commitment to lead from the front in everything we do-that's why we take pride in offering a comprehensive variety of programs and resources to support your health and well-being.
 
Recruiting for this role ends on 06/17/2026.

Search 10000+ Security tester jobs near you this March. New roles added regularly across leading industries. Apply today.

10000 security tester jobs Near Me

Penetration Tester

Penetration Tester

Penetration Tester

Enterprise Cybersecurity Penetration Tester

Penetration Tester

Penetration Tester

Penetration Tester