> Markdown version of [/jobs/ext/1242553-senior-penetration-testing-engineer](https://www.wearedevelopers.com/jobs/ext/1242553-senior-penetration-testing-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior Penetration Testing Engineer

- **Company:** Alliant Credit Union
- **Location:** Chicago, IL, United States (Remote available)
- **Experience:** Expert
- **Salary:** $92,600.0 - $144,100.0
- **Contract:** Temporary contract
- **Skills:** Testing (Software), Application Programming Interfaces (APIs), Software System Penetration Testing, Software as a Service, Cyber Security, Information Systems, Cloud Services, Software Engineering, Web Applications, Cloud Platform System, Software Security, Cyber Threat Analysis, GWAPT, Information Technology, Web Api
- **Published:** July 11, 2026
- **Apply:** https://www.careerjet.com/job/us2e81be005fb2b9ede4b8d635481fdace/eaa

## About the Role

Education & Years of Experience

 * Minimum - 4 Year Bachelors Degree in Computer Science, Cybersecurity, Information Systems or related
 * Minimum - 3 Years of Penetration testing, offensive security or related

In Lieu of Education

 * 6 Years of Penetration testing, offensive security or related

License/Certifications/Training

 * Preferred: Industry certifications such as OSWE, OSCP, OSCE, GPEN, GWAPT, CRTO, or related offensive security credentials

## Description

In this hybrid role based at our Chicago Headquarters, you will plan, execute, and report on penetration tests with a focus on web applications and web APIs across both internally developed and vendor SaaS solutions. Perform hands-on offensive security testing to identify, validate, and drive remediation of vulnerabilities in modern application and API architectures. Support targeted testing of related infrastructure, cloud services, and internal systems as needed. Work with software engineering, application security, and cyber threat mitigation teams to strengthen the organization's overall security posture.
Essential Responsibilities

 * Perform hands-on penetration testing with a primary focus on web applications and web APIs across homegrown and vendor systems, support testing of cloud, mobile, and internal systems.
 * Conduct manual and automated testing, including authenticated and unauthenticated attack scenarios.
 * Identify, exploit, and validate vulnerabilities, provide realistic assessments of risk and impact.
 * Develop proof-of-concept exploits and document attack paths when appropriate.
 * Work with development teams to guide remediation efforts, provide recommendations, review fixes, validate resolutions, and retesting.
 * Collaborate proactively with engineering through threat assessments, threat modeling, and "what-could-go-wrong" reviews before code is written.
 * Analyze and prioritize vulnerability findings based on exploitability, severity, and business impact.
 * Produce clear, actionable penetration test reports tailored for technical and non-technical audiences.
 * Present findings and trends to engineering teams, security leadership, and management.
 * Contribute to improving internal testing methodologies, tooling, and standards.
 * Stay current on emerging threats, attack techniques, and best practices relevant to modern web applications, APIs, and cloud environments.


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Web APIs you might not know about](https://www.wearedevelopers.com/videos/281-web-apis-you-might-not-know-about)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Project Fugu: Extending the web](https://www.wearedevelopers.com/videos/832-project-fugu-extending-the-web)
- [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large)
- [It's a (testing) trap! - Common testing pitfalls and how to solve them](https://www.wearedevelopers.com/videos/1193-it-s-a-testing-trap-common-testing-pitfalls-and-how-to-solve-them)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [The 8 Best Code Testing Tools](https://www.wearedevelopers.com/magazine/402-the-8-best-code-testing-tools)
- [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)
- [Best Coding Boot Camps in Germany](https://www.wearedevelopers.com/magazine/237-best-coding-boot-camps-in-germany)
- [What’s the Difference between a Junior, Mid, and Senior Developer?](https://www.wearedevelopers.com/magazine/238-what-s-the-difference-between-a-junior-mid-and-senior-developer)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)