> Markdown version of [/jobs/ext/4547226-penetration-tester](https://www.wearedevelopers.com/jobs/ext/4547226-penetration-tester). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Penetration Tester - **Company:** MM International - **Location:** San Francisco, CA, United States - **Experience:** Expert - **Contract:** Temporary contract - **Skills:** Testing (Software), Application Programming Interfaces (APIs), Burp Suite, Continuous Integration, Fat Client, Open Web Application Security, Secure Coding, Systems Integration, Metasploit, Nessus, Checkmarx, Devsecops, Static Application Security Testing, Vulnerability Analysis, Dynamic Application Security Testing - **Published:** November 3, 2026 - **Apply:** https://www.thejobnetwork.com/job/b399d19c-1a5d-48cc-a80a-56c7851fed0c/penetration-tester ## About the Role * VAPT, Web/API/Thick Client Security Testing * Tools: Burp Suite, Metasploit, Nessus, Core Impact, Checkmarx * Strong knowledge of OWASP Top 10, SANS 25, and NIST standards * Hands-on with secure coding reviews and CICD DevSecOps integration * Experience in Red Teaming and bug bounty programs preferred Ideal Candidate: * 5-8 years of security testing experience * Proven ability to mentor teams and implement enterprise security solutions ## Description Looking for an experienced Penetration Tester with strong skills in VAPT for Web, API, and Thick-Client applications, along with SAST/DAST expertise. The role involves performing manual and automated testing, identifying vulnerabilities, and integrating security into DevSecOps pipelines.