> Markdown version of [/jobs/ext/4328548-penetration-tester](https://www.wearedevelopers.com/jobs/ext/4328548-penetration-tester). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Penetration Tester

- **Company:** INVOKESEC LLC
- **Location:** United States (Remote available)
- **Salary:** $80,000.0 - $120,000.0
- **Contract:** Permanent contract
- **Skills:** Private Networks, Active Directory, Application Programming Interfaces (APIs), Amazon Web Services, Business Logic, Software System Penetration Testing, Microsoft Azure, Burp Suite, Cloud Computing, Cyber Security, Kali Linux, Network Service, Nmap, Remote Access Technology, Red Team (Cyber Security), Reverse Engineering, Simple Object Access Protocol (SOAP), Web Applications, Web Services, Enterprise Software Applications, Software Security, Information Technology, Metasploit, Graphql, Restful APIs, Vulnerability Analysis
- **Published:** October 4, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=3b870da971a706cb

## About the Role

Our consultants don't spend their days running vulnerability scanners and generating reports. We perform real-world security assessments that require creativity, technical depth, and the ability to think like an attacker. If you're passionate about security and enjoy finding vulnerabilities that others miss, we'd love to talk.

We're currently seeking mid-senior level testers who can join the team and immediately take on client engagements with demonstrated proficiency. More junior roles will open up at a later date. We're hiring for both Web Application Penetration Tester and Network (internal) Penetration Tester positions, so please make clear your preferred area of focus in your application., * Expertise in modern approaches to penetration testing and red teaming.

 * Ability to perform in-depth technical analysis of vulnerabilities.
 * Solid foundation in Cybersecurity principles, frameworks, and best practices across networks, systems, and applications.
 * Experience planning and executing complex penetration tests and adversary simulations in enterprise environments.
 * Proficiency with common offensive security tools and platforms (e.g., Burp Suite, Metasploit, Cobalt Strike, nmap, Kali Linux).
 * Experience in malware development, reverse engineering, and exploit development is a plus.
 * Ability to produce clear documentation and reports and communicate findings to both technical and business stakeholders.
 * Relevant certifications such as OSCP, OSCE, OSEP, CRTO, GPEN, or similar are highly beneficial.
 * Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or equivalent practical experience.
 * Demonstrated ability to work collaboratively in a team setting and handle sensitive information with discretion and integrity.

If discovering impactful vulnerabilities and helping organizations improve their security sounds exciting, we'd love to hear from you., * How many years of work experience do you have with Active Directory?

 * How many years of work experience do you have with Red Teaming or Penetration Testing?
 * As it relates to security testing, what is your primary area of expertise (web, mobile, internal network, active directory, AWS, Azure, etc.)? How many years of experience do you have in this area?
 * How many years of work experience do you have with application security?

Education:

 * Bachelor's (Preferred)

## Description

* Perform manual penetration tests across web applications, APIs, internal and external networks, and supporting infrastructure.
 * Identify and validate vulnerabilities across application and network environments, including authentication and authorization flaws, injection attacks, business logic vulnerabilities, insecure configurations, exposed services, privilege escalation, credential attacks, lateral movement, and other common security weaknesses.
 * Test modern application and API technologies, including REST, GraphQL, SOAP, and other web services, as applicable.
 * Assess internal and external network environments, including Active Directory, network services, operating systems, remote access infrastructure, and other enterprise technologies.
 * Exploit identified vulnerabilities to demonstrate real-world impact, establish attack paths, escalate privileges, and evaluate opportunities for lateral movement or further compromise.
 * Develop custom testing methodologies, scripts, and tooling where appropriate.
 * Analyze source code, configurations, and other technical artifacts when available to validate findings and identify additional attack paths.
 * Produce professional, client-facing reports with clear technical details, evidence, risk context, and practical remediation guidance.
 * Participate in client readout meetings to explain findings, demonstrate impact, and answer technical questions.
 * Collaborate with other penetration testers on larger or more complex engagements, including red team, cloud, social engineering, and other security assessments.
 * Continuously research new attack techniques, tooling, frameworks, vulnerabilities, and defensive technologies relevant to offensive security.