> Markdown version of [/jobs/ext/2006249-penetration-tester](https://www.wearedevelopers.com/jobs/ext/2006249-penetration-tester). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# penetration tester

- **Company:** Bishop Fox
- **Location:** Tempe, AZ, United States (Remote available)
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Password Cracking, Java (Programming Language), JavaScript (Programming Language), Microsoft Windows, Artificial Intelligence, Amazon Elastic Compute Cloud, Amazon S3, Apple Mac Systems, Software System Penetration Testing, User Authentication, Cloud Computing Security, Cyber Security, Identity and Access Management, Mobile Application Software, Python (Programming Language), Network Security, Linux System Administration, Open Web Application Security, Windows PowerShell, Ruby, Web Applications, Large Language Models, Software Security, AWS Lambda, Amazon Virtual Private Cloud (VPC), Information Technology, Cloudwatch, Vulnerability Analysis, Golang, Programming Languages
- **Published:** August 9, 2026
- **Apply:** https://www.workingnomads.com/job/go/1781011/

## About the Role

* 4+ years experience in planning, conducting, and managing web application penetration tests
 * 5+ years of application security experience
 * Deep understanding of security fundamentals (OWASP), common vulnerabilities, and application security best practices
 * Skilled in vulnerability assessment and the development of exploits for diverse targets
 * Background in system and network security, authentication and security protocols, and applied cryptography is helpful
 * Experience with programming and scripting languages such as Python, Ruby, PowerShell, Java, JavaScript, etc.
 * Bonus if you have experience reviewing Golang source code for vulnerabilities
 * Proficiency with operating systems- Linux, Windows, MacOS
 * Experience with network and system exploitation including modern tactics, techniques, and procedures (e.g. c2 frameworks, EDR bypass, privilege escalation, password cracking, lateral movement, etc.)
 * Strong technical reporting and documentation skills
 * Advanced relevant academic training, such as a degree in Computer Science or an OSCP, is a definite bonus
 * Experience with AWS cloud environments preferred with an understanding of its major technologies, such as IAM, EC2, VPC, EBS, S3, CloudWatch, and Lambdas, and how to keep them secure
 * Secondary expertise in one or more of the following areas preferred: Cloud Security Assessments, Mobile Application Security Testing, Hybrid Application Assessments, or AI/LLM Security Assessments. Ability to communicate technical findings clearly to both technical and executive stakeholders, including actionable remediation guidance.

## Description

You're a penetration tester who knows their way around source code. You've plundered apps and pillaged networks (legally, of course). You have a passion for hacking and information security. You may also have written a few blog posts about your favorite hacks or have presented at a handful of conferences - with an eye to doing more.


## Related Videos

- [Coffee with Developers: David Heinemeier Hansson](https://www.wearedevelopers.com/videos/875-coffee-with-developers-david-heinemeier-hansson)
- [Go with the Flow: Stop the Leaks Before Your Memory's a Waterfall!](https://www.wearedevelopers.com/videos/100073-go-with-the-flow-stop-the-leaks-before-your-memory-s-a-waterfall)
- [WeAreDevelopers LIVE - CSS is DOOMed](https://www.wearedevelopers.com/videos/1838-wearedevelopers-live-css-is-doomed)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Building Systems that Last](https://www.wearedevelopers.com/videos/1389-building-systems-that-last)
- [Fireside Chat with Werner Vogels, VP & CTO, Amazon.com & Daniel Gebler, CTO at Picnic](https://www.wearedevelopers.com/videos/1405-fireside-chat-with-werner-vogels-vp-cto-amazon-com-daniel-gebler-cto-at-picnic)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [The 8 Best Code Testing Tools](https://www.wearedevelopers.com/magazine/402-the-8-best-code-testing-tools)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Dev Digest 138 - Are you secure about this?](https://www.wearedevelopers.com/magazine/486-dev-digest-138-are-you-secure-about-this)
- [Should senior developers refuse interview coding challenges?](https://www.wearedevelopers.com/magazine/29-should-senior-developers-refuse-interview-coding-challenges)