> Markdown version of [/jobs/ext/3548864-penetration-tester](https://www.wearedevelopers.com/jobs/ext/3548864-penetration-tester). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Penetration Tester

- **Company:** Quzara Llc
- **Location:** Washington, DC, United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Java (Programming Language), JavaScript (Programming Language), PHP (Programming Language), Application Programming Interfaces (APIs), Business Logic, Software System Penetration Testing, Microsoft Azure, C++ (Programming Language), Cyber Security, Computer Networks, Databases, Perl (Programming Language), Python (Programming Language), Kali Linux, Windows PowerShell, Comptia Pentest+ CE, Red Team (Cyber Security), Ruby, Reverse Engineering, Web Application Security, SQL Databases, Wireshark, Web Applications, Web Testing, Scripting, Cloud Platform System, Information Technology, Burpsuite, Vulnerability Analysis
- **Published:** October 1, 2026
- **Apply:** https://www.juju.com/job/16_f88092fb3

## About the Role

* Required bachelor's degree in cyber security, computer science, IT or a related field.
 * Required: A fundamental understanding and experience with business/application logic vulnerabilities.
 * Required: 6 years minimum work experience directly related to Red Team assessments, and/or penetration testing (intranet, internet, web, wireless, social engineering), with a focus on Web Application testing. Additional years of relevant experience may be considered in lieu of a bachelor's degree.
 * Required: Must have an active OSCP+ certification in addition to one of the following:
 + CompTia PenTest+
 + CEH
 + CompTia CySa+
 + GCIH
 + GCFA
 + CISSP
 * Expertise with scripting languages (e.g., Python, PowerShell, Java, Perl, etc)
 * Expertise with API focused penetration testing.
 * Proficiency with penetration testing tools (Kali Linux, Binwalk, BurpSuite, Wireshark, etc)

Nice To Have:

 * Certification focuses on Web Application penetration testing.
 + i.e. eWPT, BSCP, etc
 * Relevant security research.
 + Accredited CVEs, research papers or contributions to the cyber security sphere.

## Description

The Senior Penetration Tester will lead and execute advanced security assessments across web applications, APIs, internal networks, cloud environments, and client infrastructure. This role is responsible for planning and performing penetration tests and vulnerability assessments, simulating real-world attack scenarios, identifying security weaknesses, and translating findings into clear reports, risk assessments, and actionable recommendations for technical and leadership audiences. The Senior Penetration Tester will also support client coordination, report delivery, and debriefs while mentoring penetration testing team members and maintaining advanced expertise in security tools, scripting, networking, web application security, and emerging offensive security techniques., * Plan, create, and execute advanced penetration methods, scripts, and tests for the team, with a focus on Web Applications

 * Assess and test the security of internal networks and underlying application infrastructure.
 * Conduct penetration testing and vulnerability assessments on Azure cloud infrastructure and applications
 * Lead and mentor a team of penetration testers, providing guidance and sharing expertise
 * Carry out remote and on-site testing of client networks and infrastructure to expose security weaknesses
 * Simulate security breaches to assess a system's relative security
 * Create detailed reports and recommendations based on findings, including uncovered security issues and associated risk levels
 * Present findings, risk assessments, and conclusions to management and other relevant parties
 * Maintain advanced knowledge of networking, cryptography, reverse engineering, web applications, operating systems databases
 * Possess expertise in various scripting and programming languages, including Python, SQL, C/C++, JavaScript, PHP, Java, and Ruby
 * Provide strong written and oral communication skills to effectively convey assessment results and potential weaknesses
 * Assist in penetration testing intake, coordination with client teams for scheduling and delivery of reports/debriefs.

Marginal Functions of the Job

 * Other duties as assigned

Normal Work Schedule

This is a full-time position. Standard business hours are Monday through Friday 8:30 AM to 5:30 PM. If your role falls within our Security Operations Center, you will be assigned a specific shift. As a result, your working schedule may require flexibility to cover any shift that falls within a 24/7 cycle, it may also change and rotate, including nights, weekends, and holidays.


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java)
- [Coffee with Developers: David Heinemeier Hansson](https://www.wearedevelopers.com/videos/875-coffee-with-developers-david-heinemeier-hansson)
- [Plants vs. Thieves: Automated Tests in the World of Web Security](https://www.wearedevelopers.com/videos/1282-plants-vs-thieves-automated-tests-in-the-world-of-web-security)
- [Intermediate Bitcoin Script](https://www.wearedevelopers.com/videos/25-intermediate-bitcoin-script)
- [Coroutine explained yet again 60 years later](https://www.wearedevelopers.com/videos/690-coroutine-explained-yet-again-60-years-later)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [The 8 Best Code Testing Tools](https://www.wearedevelopers.com/magazine/402-the-8-best-code-testing-tools)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Best Coding Boot Camps in Germany](https://www.wearedevelopers.com/magazine/237-best-coding-boot-camps-in-germany)
- [Should senior developers refuse interview coding challenges?](https://www.wearedevelopers.com/magazine/29-should-senior-developers-refuse-interview-coding-challenges)