> Markdown version of [/jobs/ext/3224440-penetration-testing-engineer](https://www.wearedevelopers.com/jobs/ext/3224440-penetration-testing-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Penetration Testing Engineer

- **Company:** Alliant Credit Union
- **Location:** Chicago, IL, United States (Remote available)
- **Salary:** $76,600.0 - $119,100.0
- **Contract:** Temporary contract
- **Skills:** Testing (Software), Application Programming Interfaces (APIs), Software System Penetration Testing, Cyber Security, Information Systems, Python (Programming Language), Web Applications, Cloud Platform System, GWAPT, Information Technology, Static Application Security Testing, Web Api, Dynamic Application Security Testing
- **Published:** September 10, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=7abee47a57b4815e

## About the Role

Education & Years of Experience

 * Minimum - 4 Year Bachelors Degree in Computer Science, Cybersecurity, Information Systems or related
 * Minimum - 0 Years of Penetration testing, offensive security or related

In Lieu of Education

 * 4 Years of Penetration testing, offensive security or related

License/Certifications/Training

 * Preferred - Industry certifications such as OSWE, OSCP, OSCE, GPEN, GWAPT, CRTO, or related offensive security credentials

## Description

* Perform penetration testing with a primary focus on web applications and web APIs across homegrown and vendor systems, support testing of cloud, mobile, and internal systems.
 * Conduct manual and automated testing, including authenticated and unauthenticated attack scenarios.
 * Identify and validate vulnerabilities, and assist in assessing risk and potential impact
 * Develop proof-of-concept exploits and document attack paths when appropriate.
 * Work with development teams to support remediation efforts by review fixes, validate resolutions, and retesting.
 * Support the analysis and prioritization of vulnerabilities based on exploitability, severity, and business impact.
 * Produce clear, actionable penetration test reports for technical and non-technical audiences.
 * Contribute to improving internal testing methodologies, tooling, and standards.
 * Stay current on emerging threats, attack techniques, and best practices relevant to modern web applications, APIs, and cloud environments.
 * Maintain and administer DAST, SAST, and SCA tools, including scan execution, troubleshooting, and validation of findings.
 * Support, troubleshoot and enhance internal security workflow applications and automation written in Python.


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Web APIs you might not know about](https://www.wearedevelopers.com/videos/281-web-apis-you-might-not-know-about)
- [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large)
- [Project Fugu: Extending the web](https://www.wearedevelopers.com/videos/832-project-fugu-extending-the-web)
- [It's a (testing) trap! - Common testing pitfalls and how to solve them](https://www.wearedevelopers.com/videos/1193-it-s-a-testing-trap-common-testing-pitfalls-and-how-to-solve-them)

## Related Articles

- [The 8 Best Code Testing Tools](https://www.wearedevelopers.com/magazine/402-the-8-best-code-testing-tools)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Best Coding Boot Camps in Germany](https://www.wearedevelopers.com/magazine/237-best-coding-boot-camps-in-germany)
- [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)