> Markdown version of [/jobs/ext/4458938-senior-penetration-tester](https://www.wearedevelopers.com/jobs/ext/4458938-senior-penetration-tester). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior Penetration Tester

- **Company:** Carson Llp
- **Location:** United States (Remote available)
- **Experience:** Expert
- **Salary:** $125,000.0 - $145,000.0
- **Contract:** Permanent contract
- **Skills:** Testing (Software), Application Programming Interfaces (APIs), Software System Penetration Testing, CompTIA Security+, Cyber Security, Information Systems, Mobile Application Software, Information Systems Security Architecture Professional, Network Security, Open Source Technology, Cloud Services, Anti-Phishing, Web Applications, Wireless Networks, Software Security, GWAPT, Information Technology, Network Server, Blue Team (Cyber Security), Vulnerability Analysis
- **Published:** October 7, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=6cc1dff1b2ee0d93

## About the Role

* Must have a minimum of 7+ years of experience as a network and application penetration tester.
 * Have OSCP/OSCE, CREST, GPEN, CEH, or equivalent certification.
 * University Degree or College Diploma in Computer Sciences, Information Technology or a related field or equivalent combination of education and experience.

Preferred Skills and Expertise

 * Demonstrated experience (minimum 5-10 years) in performing hands-on penetration tests against external and internal networks, operating systems, web applications and more.
 * Demonstrated experience running and managing network and application vulnerability scanning and assessment tools.
 * Demonstrated technical knowledge of current vulnerabilities, exploits and tools (commercial and open source).
 * Extensive technical knowledge of security industry best practices and procedures.
 * Demonstrated experience with security assessment frameworks and procedures, including following industry best practice methodologies for penetration testing and the ability to perform both manual and automated testing.
 * Experience in researching evolving exploits, techniques, and tools in support of penetration testing efforts.
 * Experience in developing security tools, using scripts and utilities to automate assessment and analysis activities
 * Experienced in sustaining a penetration test target rich lab environment to serve as a training environment and an environment in which to develop and test new advanced exploits.
 * Experience in assisting in the sustainment of an up to dated penetration testing toolbox.

Soft Skills

 * Excellent verbal and written communication skills including the ability to write clear and concise assessment reports that include of findings, recommendations, road maps, and actionable plans.
 * Exceptional customer service, communication and interpersonal skills.
 * Ability to communicate and work closely with executives, peers and employees at all levels.
 * Ability and willingness to work outside of business hours (weekends/evenings)
 * Strong time management and organizational
 * High degree of integrity, competence, adaptability, resilience and initiative.
 * Maintain relevant industry certifications and demonstrate a willingness to work toward additional credentials., * Experience testing mobile applications, social engineering, phishing, vishing, physical security, wireless networks, and more.
 * Consulting experience leveraging offensive methodologies during red and blue team penetration testing.
 * Experience with curating technical and non-technical documentation with reference to internal processes, procedures and.
 * Knowledge of security compliance policy, programs, processes, and metrics.
 * Researching and learning about information security trends, new testing techniques, and best practices, and knowledge sharing with the team.
 * Professional offensive security certifications including OSWE, OSCE are beneficial.

Penetration Testing certifications such as:

 * GIAC security certifications (GPEN, GWAPT, GXPN)
 * Qualified/Licensed Penetration Tester (Q/LPT)
 * Certified Penetration Tester (CPT)
 * CompTIA Certified Ethical Hacker (CEH)

General Cybersecurity certifications such as:

 * Certified Information Systems Security Professional (CISSP)
 * Certified Information Systems Auditor (CISA)
 * Certified Information Security Manager (CISM)
 * Certified Risk Management Professional (CRMP)
 * Certified in Risk and Information Systems Control (CRISC)
 * Information Systems Security Management Professional (ISSMP)

## Description

* Performing penetration tests against internal and/or external environment of different organizations including network, servers, workstations, applications, API and online/cloud services.
 * Evaluating and attempting to bypass the organization's current information security controls.
 * Conduct network and application vulnerability assessments.
 * Write reports including technical details, risk analysis and providing remediation recommendations for identified issues.
 * Participate in project related meetings: information gathering, solution design, project checkpoints and
 * Serve as subject matter expert in areas of network security, application security, and attack and defense techniques and countermeasures.