> Markdown version of [/jobs/ext/4087447-cybersecurity-penetration-tester](https://www.wearedevelopers.com/jobs/ext/4087447-cybersecurity-penetration-tester). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cybersecurity Penetration Tester - **Company:** SOCBOX INC. - **Location:** San Diego, CA, United States (Remote available) - **Salary:** $100,000.0 - $110,000.0 - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Application Programming Interfaces (APIs), Amazon Web Services, Apple Mac Systems, Software System Penetration Testing, Authentication Protocols, Microsoft Azure, Unix, Client Server Models, Configuration Management, Cyber Security, Linux, Hyper-V, Mobile Application Software, Local Area Networks, Network Security, Systems Architecture, Virtualization Technology, Wide Area Networks, Web Applications, Web Hosting Services, Xen Servers, Network Routers, Cloud Platform System, Computer Network Technologies, Software Security, Firewalls (Computer Science), GWAPT, Containerization, Integration Tests, Vulnerability Analysis, Vmware - **Published:** October 13, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=7a34c5358117d132 ## About the Role * Excellent organizational, verbal, and written communication skills, including the ability to explain complex technical findings to nontechnical audiences. * Strong understanding of cybersecurity fundamentals, common vulnerabilities, attack methodologies, and remediation strategies. * Demonstrated experience in vulnerability discovery, security engineering, application security, and penetration testing. * Intermediate to advanced proficiency with virtualization and containerization technologies. * Strong analytical, critical-thinking, and problem-solving skills. * Ability to independently manage multiple client engagements, prioritize competing deadlines, and deliver high-quality results. * Strong attention to detail, particularly in documenting vulnerabilities, supporting evidence, and remediation recommendations. * Ability to work collaboratively in a remote, client-focused consulting environment., * Required Certification: GIAC Penetration Tester (GPEN). * Preferred Certification: Offensive Security Certified Professional (OSCP). Additional advanced cybersecurity certifications, including OSCE, GWAPT, GXPN, or CISSP, are a plus. * Required Work Sample: Candidates must be able to provide a sanitized sample penetration testing report demonstrating their ability to document vulnerabilities, assess risk, present technical findings, and communicate actionable remediation recommendations. All samples must exclude confidential client information. * Strong foundational knowledge and hands-on experience in web application and network penetration testing. Experience with mobile applications, APIs, cloud environments, and hands-on cybersecurity training platforms such as HackTheBox and TryHackMe is a plus. * Previous experience in cybersecurity consulting, penetration testing, or offensive security assessments. * Solid understanding of common web application vulnerabilities, exploitation techniques, and remediation options. * Knowledge of IT infrastructure, security engineering, system and network security, authentication protocols, and applied cryptography. * Experience with configuration management, system maintenance, integration testing, penetration testing, and vulnerability analysis. * Knowledge of system architectures and networking technologies, including client/server environments, web hosting, directory services, firewalls, WAN, MAN, LAN, switches, and routers. * Proficiency with macOS, Linux, and Windows operating systems. * Experience preparing professional penetration testing reports and presenting assessment results to clients. * Familiarity with industry-standard penetration testing methodologies, frameworks, and tools. WORK ENVIRONMENT AND TRAVEL * Remote position with occasional travel required for client engagements, meetings, or other business needs. * Must be able to work independently and collaborate effectively with geographically distributed teams. * Occasional testing outside of regular business hours, including evenings and weekends, may be required based on client needs and engagement requirements., * Ability to spend prolonged periods of time standing, speaking, walking, driving, and/or sitting * Requires ability to occasionally lift up to 25lbs * Position may require travel: Up to 5% * Reasonable accommodation may be made to enable individuals with disabilities to perform the essential requirements. ## Description As Penetration Tester at FIT Cybersecurity, your responsibilities would include testing client's internal and external networks, web applications, and APIs. The Penetration Tester will provide debriefing to both client technical and executive teams on security assessment findings. As a consultant, you'll solve challenging technical problems and build creative solutions. As a trusted advisor, you'll provide your expert opinion to help our clients navigate difficult business decisions. And as a security associate, you'll lead teams on one-of-a-kind engagements, mentor co-workers, and contribute significantly to the advancement of our assessment and penetration testing practice., * Identify and disclose vulnerabilities and vulnerable components of a client infrastructure. * Execute webapp and network pen tests independently, providing clients the remediation guidance for all significant identified vulnerabilities. * Contribute to Assessment Research and Development initiatives (identifying new 0-day vulnerabilities, improving attack methodologies, improving penetration test tolling, etc.). * Develop and adhere to process documentation in support of cyber penetration testing execution. SECONDARY OBJECTIVES * Identify emerging security risks and collaborate with internal service teams and clients to develop appropriate mitigation strategies. * Configure and support various operating systems (Windows, Linux, UNIX, macOS), virtualization platforms (VMware, Xen, Hyper-V), and cloud environments (AWS, Azure) used in penetration testing. * Effectively assess and communicate security risks, business impact, and appropriate levels of urgency to stakeholders. * Lead client engagement kickoff meetings, technical debriefings, and executive presentations. * Collaborate effectively with internal teams, external organizations, and client stakeholders throughout security assessment engagements. * Share knowledge, provide technical guidance, and train team members on penetration testing methodologies, tools, and best practices. * Support continuous improvement initiatives to enhance the effectiveness and efficiency of penetration testing services. * Perform other duties as assigned.