> Markdown version of [/jobs/ext/2163561-penetration-tester](https://www.wearedevelopers.com/jobs/ext/2163561-penetration-tester). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Penetration Tester

- **Company:** Elegant Enterprise Wide Solutions
- **Location:** Sacramento, CA, United States
- **Contract:** Permanent contract
- **Skills:** Software System Penetration Testing, Cloud Computing Security, Open Web Application Security, GWAPT, Vulnerability Analysis
- **Published:** August 21, 2026
- **Apply:** https://www.dice.com/job-detail/6c55b98a-0dcf-4026-97e2-6a229cf8a2b9

## About the Role

5+ years of penetration-testing or security-validation experience.
Experience with vulnerability assessment and controlled exploitation.
Knowledge of OWASP, NIST, PTES, or comparable methodologies.
Preferred: OSCP, OSCE, GPEN, GWAPT, or CISSP.

## Description

Develop penetration-test plans and rules of engagement.
Perform authorized, risk-based penetration testing.
Conduct controlled exploitation and vulnerability validation.
Assess network, application, infrastructure, and cloud security as applicable.
Document vulnerabilities, risk, impact, and evidence.
Develop remediation recommendations.
Perform remediation validation and retesting.
Prepare penetration-testing reports and supporting evidence.


## Related Videos

- [How to Cause (or Prevent) a Massive Data Breach- Secure Coding and IDOR](https://www.wearedevelopers.com/videos/39-how-to-cause-or-prevent-a-massive-data-breach-secure-coding-and-idor)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [A Computer Is All You Need](https://www.wearedevelopers.com/videos/100142-a-computer-is-all-you-need)
- [Securing Your Web Application Pipeline From Intruders](https://www.wearedevelopers.com/videos/53-securing-your-web-application-pipeline-from-intruders)
- [It's a (testing) trap! - Common testing pitfalls and how to solve them](https://www.wearedevelopers.com/videos/1193-it-s-a-testing-trap-common-testing-pitfalls-and-how-to-solve-them)
- [WebAssembly: The Next Frontier of Cloud Computing](https://www.wearedevelopers.com/videos/972-webassembly-the-next-frontier-of-cloud-computing)

## Related Articles

- [The 8 Best Code Testing Tools](https://www.wearedevelopers.com/magazine/402-the-8-best-code-testing-tools)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Benefits of Using JMeter For Performance Testing](https://www.wearedevelopers.com/magazine/96-benefits-of-using-jmeter-for-performance-testing)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Integration And E2E Testing: Are They Complementary or Interchangeable?](https://www.wearedevelopers.com/magazine/86-integration-and-e2e-testing-are-they-complementary-or-interchangeable)