Senior Penetration Tester

• Perform Web Application Penetration Testing
• Conduct API Security Testing
• Perform External Network Penetration Testing
• Conduct Internal Network Penetration Testing
• Execute Cloud Security Assessments (AWS, Azure, Google Cloud)
• Perform Mobile Application Penetration Testing (iOS & Android)
• Conduct Wireless Security Assessments
• Identify, validate, and exploit security vulnerabilities safely
• Perform manual penetration testing beyond automated vulnerability scanning
• Test authentication, authorization, session management, and business logic flaws
• Assess Active Directory security and privilege escalation opportunities
• Review application security architecture
• Create detailed technical and executive penetration testing reports
• Provide remediation recommendations aligned with industry best practices
• Participate in client meetings to explain findings and remediation strategies
• Support security validation after remediation (retesting)
• Stay current with emerging vulnerabilities, exploits, attack techniques, and security research

• Strong understanding of Web Application Security
• Experience performing Manual Penetration Testing
• Knowledge of OWASP Top 10
• Understanding of OWASP API Security Top 10
• Experience with Network Penetration Testing
• Cloud Security knowledge (AWS, Azure, or GCP)
• Linux and Windows security knowledge
• Active Directory security testing
• Experience identifying and validating vulnerabilities
• Excellent technical documentation and report writing skills
• Strong communication skills
• Ability to work independently and collaboratively

Preferred Experience

Experience with one or more of the following:

• Burp Suite Professional
• Nmap
• Metasploit Framework
• Nessus
• Wireshark
• Kali Linux
• ffuf
• Nuclei
• Postman
• SQLMap
• BloodHound
• CrackMapExec
• Responder
• Impacket
• Docker
• Git
• Python
• PowerShell
• Bash

Preferred Certifications

One or more of the following certifications is an advantage:

• OSCP
• PNPT
• CEH
• GPEN
• CPTS
• CISSP
• Security+
• eCPPT
• CRTO
• CRTP

Nice to Have

• Source Code Review experience
• Red Team experience
• Social Engineering engagements
• Phishing assessments
• Azure and Microsoft 365 security
• Kubernetes security
• Container security
• CI/CD security
• DevSecOps experience
• Threat Modeling
• Secure SDLC knowledge

Pluto Security is a rapidly growing cybersecurity consulting and penetration testing company delivering world-class offensive security services across the United States and Canada. We help organizations identify, validate, and remediate security vulnerabilities before attackers can exploit them. Our team specializes in penetration testing, vulnerability assessments, cloud security, application security, red team operations, cybersecurity consulting, managed security services, and compliance-driven security testing for industries including healthcare, finance, government, technology, and critical infrastructure. We are looking for a highly motivated Penetration Tester who enjoys solving complex security challenges and performing real-world offensive security assessments. What You'll Do As a Penetration Tester at Pluto Security, you will perform comprehensive security assessments for enterprise clients across various industries., At Pluto Security, you'll work alongside experienced cybersecurity professionals on challenging security engagements for organizations throughout the United States. We provide opportunities to work on: * Enterprise penetration testing * Government security projects * Healthcare security assessments * Financial institution security testing * Cloud security consulting * API security testing * Web application security * Mobile application security * Network security assessments * Red Team engagements * Vulnerability Assessments * Cybersecurity Consulting * Managed Security Services We encourage continuous learning, professional certifications, research, and career development while working with cutting-edge technologies and real-world attack scenarios. Keywords Penetration Tester, Senior Penetration Tester, Ethical Hacker, Offensive Security Engineer, Application Security Engineer, Security Consultant, Cybersecurity Consultant, Web Application Penetration Tester, API Penetration Tester, Cloud Security Engineer, Vulnerability Assessment, Vulnerability Testing, Vulnerability Management, Network Penetration Testing, Internal Penetration Testing, External Penetration Testing, Mobile Application Security, Mobile Penetration Testing, Red Team, Security Engineer, Information Security Consultant, OWASP, Burp Suite, Kali Linux, AWS Security, Azure Security, GCP Security, Cybersecurity Jobs, Penetration Testing Jobs, Ethical Hacking Jobs, Security Testing, Offensive Security, Cyber Defense, Application Security, API Security, Cloud Security, Cybersecurity Company, Cybersecurity Consulting, Penetration Testing Company, Managed Security Services, Pluto Security, New Jersey Cybersecurity Jobs. About Pluto Security Pluto Security is a leading cybersecurity consulting and penetration testing company helping organizations strengthen their security posture through expert-led offensive security services. Our offerings include web application penetration testing, API penetration testing, cloud security assessments, network penetration testing, mobile application security testing, vulnerability assessments, red team engagements, cybersecurity consulting, managed security services, compliance security testing, and security advisory services. If you're passionate about ethical hacking, offensive security, penetration testing, and helping organizations defend against modern cyber threats, we'd love to hear from you.