> Markdown version of [/jobs/ext/1916681-penetration-tester](https://www.wearedevelopers.com/jobs/ext/1916681-penetration-tester). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Penetration Tester - **Company:** Security On-Demand - **Location:** United States (Remote available) - **Experience:** Experienced - **Contract:** Permanent contract - **Skills:** Artificial Intelligence, Amazon Web Services, Software System Penetration Testing, Microsoft Azure, Bash Shell, Burp Suite, Cloud Computing Security, Cyber Security, Domain Name System (DNS), Hypertext Transfer Protocols (HTTP), Identity and Access Management, Virtual Private Networks (VPN), Python (Programming Language), Networking Basics, Nmap, Open Web Application Security, Windows PowerShell, Comptia Pentest+ CE, Red Team (Cyber Security), TCP/IP, Time Tracking Software, Web Applications, Scripting, Google Cloud, Large Language Models, Software Security, Bug Reporting, Metasploit, Nessus, Purple Team (Cyber Security) - **Published:** August 4, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=c28e93a4adb6db61 ## About the Role * 2-5 years of professional penetration testing or applied offensive security experience; strong candidates with equivalent demonstrated skills will be considered. * Proficiency with standard toolsets: Nmap, Metasploit, Burp Suite, Nessus/OpenVAS, BloodHound, or equivalents. * Solid understanding of networking fundamentals (TCP/IP, DNS, HTTP/S, AD, VPNs) and common vulnerability classes. * Familiarity with at least one scripting language (Python, Bash, or PowerShell) for basic automation and tooling. * Exposure to cloud platforms (AWS, Azure, or GCP) and awareness of common cloud misconfiguration patterns. * Solid understanding of AI technology in everyday work activities. Strong written communication with the ability to produce accurate, professional-quality findings documentation. *, * Hands-on penetration testing certification, such as PNPT (TCM Security), OSCP (Offensive Security), CompTIA PenTest+, or eWPT/eJPT with demonstrated experience. ## Description The Penetration Tester is a practicing offensive security professional who independently executes client engagements across DeepSeas' core service lines. This role represents the transition from emerging practitioner to confident, self-sufficient contributor. Penetration Testers own their engagements end-to-end within defined scope, produce client-ready deliverables without heavy oversight, and are developing the depth and breadth needed to tackle increasingly complex environments. This is the primary delivery role on the team and the foundation of the practice's capacity., Technical Delivery * Conduct internal and external network penetration tests including enumeration, exploitation, lateral movement, and post-exploitation within defined scope. * Perform web application assessments aligned to OWASP Top 10 and API security testing standards. * Conduct basic cloud security assessments (AWS, Azure, GCP) including misconfiguration identification, IAM review, and exposed services enumeration. * Bring experience with adversarial engagements such as red team and purple team exercises. * Support AI/LLM security assessments including prompt injection, model abuse scenarios, and OWASP LLM Top 10 coverage under senior guidance. Reporting & Client Communication * Produce complete, client-ready findings reports with clear technical narratives, reproduction steps, risk ratings, and remediation guidance. * Participate in client kick-off calls and debrief walkthroughs, communicating findings professionally to technical and non-technical stakeholders. * Maintain accurate engagement documentation, time tracking, and artifact organization in project management systems. Professional Growth & Travel * Pursue continuous development through assigned training, lab environments, and certification advancement. * May be required to travel up to 25% of the time. Candidates must be U.S. citizens and currently reside within the United States. *, At Deep Seas, we like to say that heart rates go down, careers take off, and security programs mature. Our values provide the ultimate guide for our daily behavior and decisions. Without these values, we aren't Deep Seas. They preserve the essence of our organization, reflect the personalities of our Deeps (how we affectionately refer to our teammates), and enable us to exceed expectations. Our values are: * We are client obsessed. * We stand in solidarity with our teammates. * We prioritize personal health and well-being. * We believe in the power of diversity. * We solve hard problems at the speed of cyber. This is your chance to join a supportive crew of teammates and an industry-leading organization that values opportunities for growth. If DeepSeas sounds like a good fit for you, send us your resume and let's talk! Information security is everyone's responsibility: * Understanding and following DeepSeas's information security policies and procedures. * Remaining vigilant and reporting any suspicious activity or possible weaknesses in DeepSeas's information security. * Actively participating in DeepSeas's efforts to maintain and improve information security. * DeepSeas considers this position is as Moderate Risk with a potential to view/access/download restricted/private client/internal data. * This information must be treated with sensitivity and in the most secure manner. * HR reserves the right to perform random background/drug screens to ensure the safety of client/DeepSeas data ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [An Applied Introduction to eBPF with Go](https://www.wearedevelopers.com/videos/1075-an-applied-introduction-to-ebpf-with-go) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) - [Turning Container security up to 11 with Capabilities](https://www.wearedevelopers.com/videos/718-turning-container-security-up-to-11-with-capabilities) - [Debunking the Top 10 Myths about Web 3](https://www.wearedevelopers.com/videos/634-debunking-the-top-10-myths-about-web-3) - [It's a (testing) trap! - Common testing pitfalls and how to solve them](https://www.wearedevelopers.com/videos/1193-it-s-a-testing-trap-common-testing-pitfalls-and-how-to-solve-them) ## Related Articles - [The 8 Best Code Testing Tools](https://www.wearedevelopers.com/magazine/402-the-8-best-code-testing-tools) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy) - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)