> Markdown version of [/jobs/ext/2936072-penetration-tester-application-security](https://www.wearedevelopers.com/jobs/ext/2936072-penetration-tester-application-security). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Penetration Tester - Application Security

- **Company:** ITR Group
- **Location:** United States
- **Experience:** Expert
- **Salary:** $166,400.0 - $187,200.0
- **Contract:** Permanent contract
- **Skills:** Software System Penetration Testing, Burp Suite, Mobile Application Software, Python (Programming Language), Nmap, Scripting
- **Published:** September 16, 2026
- **Apply:** https://www.thejobnetwork.com/job/48d56b81-9d69-4680-9cd5-4e91117abf96/senior-penetration-tester-application-security

## About the Role

Opportunity available for a Senior Penetration Tester with strong hands-on experience testing web applications and APIs in enterprise environments. The ideal candidate will have advanced Burp Suite experience and the ability to independently manage penetration testing engagements from scoping through reporting and remediation validation., n
\n

 * 5+ years of hands-on penetration testing experience
\n

 * Strong web application and API penetration testing experience
\n

 * Experience independently executing end-to-end penetration tests
\n

 * Strong understanding of application vulnerabilities
\n

 * Advanced Burp Suite experience
\n

 * Experience with Nmap and exploitation frameworks
\n

 * Python or Go scripting/automation experience
\n

 * Strong technical documentation and communication skills
\n

 * Experience working directly with engineering teams on remediation



## Related Videos

- [How to Cause (or Prevent) a Massive Data Breach- Secure Coding and IDOR](https://www.wearedevelopers.com/videos/39-how-to-cause-or-prevent-a-massive-data-breach-secure-coding-and-idor)
- [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java)
- [It's a (testing) trap! - Common testing pitfalls and how to solve them](https://www.wearedevelopers.com/videos/1193-it-s-a-testing-trap-common-testing-pitfalls-and-how-to-solve-them)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Intermediate Bitcoin Script](https://www.wearedevelopers.com/videos/25-intermediate-bitcoin-script)
- [Oops! Stories of supply chain shenanigans](https://www.wearedevelopers.com/videos/245-oops-stories-of-supply-chain-shenanigans)

## Related Articles

- [The 8 Best Code Testing Tools](https://www.wearedevelopers.com/magazine/402-the-8-best-code-testing-tools)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [11 Best Practices For PHP Security](https://www.wearedevelopers.com/magazine/90-11-best-practices-for-php-security)
- [Where To Find Software Engineering Jobs](https://www.wearedevelopers.com/magazine/396-where-to-find-software-engineering-jobs)
- [Benefits of Using JMeter For Performance Testing](https://www.wearedevelopers.com/magazine/96-benefits-of-using-jmeter-for-performance-testing)