> Markdown version of [/jobs/ext/3971477-penetration-tester](https://www.wearedevelopers.com/jobs/ext/3971477-penetration-tester). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Penetration Tester - **Company:** NinjaOne, LLC - **Location:** Austin, TX, United States (Remote available) - **Experience:** Expert - **Salary:** $130,000.0 - $165,000.0 - **Contract:** Permanent contract - **Skills:** Java (Programming Language), Microsoft Windows, Software System Penetration Testing, User Authentication, Automation of Tests, Burp Suite, C++ (Programming Language), Cloud Computing Security, Cyber Security, Linux, Python (Programming Language), Networking Basics, Open Web Application Security, Software Engineering, TCP/IP, Web Applications, Cloud Platform System, Spring Cloud, Software Security, Kotlin, Information Technology, Web Api - **Published:** October 27, 2026 - **Apply:** https://www.careerbuilder.com/job-details/penetration-tester-austin-tx--5e3dc41e-9f55-478e-ae8b-0a1a5919c2a2 ## About the Role Penetration Testing, Testing, Penetration Testing, Internet Application, Leadership, Architectural Services, Process Improvement, Computer Security, Applications Security, Work From Home, * Bachelor's degree in Information Technology, Computer Science, or a related field * 8+ years of hands-on penetration testing experience, within a broader 5+ years in cybersecurity-related roles * Strong understanding of security protocols, cryptography, authentication/authorization, and modern attack techniques * Security certifications such as OSCP (highly desired) and/or Security+, CISSP, or CISM are a plus * Proficiency with penetration testing tools such as Burp Suite, Caido, and related frameworks * Experience validating and scoring vulnerabilities (CVSS) and communicating findings to both technical and non-technical audiences; bug bounty triage or program experience is a strong plus * Ability to develop custom testing tools or scripts (Java, Kotlin, C++, Python, or Go) * Knowledge of security frameworks and methodologies (OWASP, NIST, BSIMM), threat modeling (STRIDE, DREAD), and system hardening standards (CIS, CSA) * Solid understanding of Linux and Windows operating systems, enterprise architecture, and TCP/IP and UDP networking fundamentals * Experience testing or exploiting cloud-native applications; understanding cloud security architecture is a plus * Strong analytical and problem-solving skills with excellent written and verbal communication; this role communicates directly with external security researchers, engineers, and leadership ## Description The Penetration Tester role is a key part of NinjaOne's core security team, with visibility across the entire organization, from individual developers to executive leadership. You will directly strengthen the security of the NinjaOne platform by identifying and helping resolve technical, security, and architectural vulnerabilities across our applications and environments. The ideal candidate takes a multi-layered approach to uncovering weaknesses in software, web applications, and client-side components to drive meaningful security improvements. This role is also a key contributor to NinjaOne's public bug bounty program, validating externally reported vulnerabilities and working directly with security researchers around the world., * Perform controlled penetration testing of NinjaOne applications, cloud environments, and infrastructure, demonstrating exploitability and documenting risks and remediation steps * Perform security testing of new and modified API endpoints and features as part of each release cycle, prioritizing coverage against release timelines * Collaborate with Engineering to validate vulnerabilities, communicate impact, and support secure design and remediation efforts * Develop custom tools or scripts to support penetration testing, automation, and exploit development * Perform first-pass triage and validation of bug bounty submissions: reproduce reported issues, assess severity and impact (CVSS), identify duplicates, and route confirmed findings to the appropriate teams * Communicate directly with external security researchers in clear, professional written English throughout the report lifecycle * Stay current on emerging threats, TTPs, and cybersecurity trends, applying them to evaluate NinjaOne's exposure and guide security initiatives * Create clear, comprehensive reports and presentations for both technical and executive stakeholders * Promote security awareness across the organization, contributing to policies, best practices, and ongoing security education * Other duties as needed, *Due to operational policies, NinjaOne is unable to hire for this role within the city limits of Chicago. We will consider all qualified candidates who reside outside of the city proper or are willing to self-relocate.