> Markdown version of [/jobs/ext/4632938-cloud-security-penetration-tester](https://www.wearedevelopers.com/jobs/ext/4632938-cloud-security-penetration-tester). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cloud Security Penetration Tester - **Company:** Vanguard - **Location:** Dallas, TX, United States - **Experience:** Experienced - **Contract:** Permanent contract - **Skills:** Testing (Software), Application Programming Interfaces (APIs), Software System Penetration Testing, Automation of Tests, Burp Suite, Software as a Service, Cloud Computing, Cloud Computing Security, Cyber Security, Identity and Access Management, Web Applications, Multi-Cloud, GWAPT - **Published:** November 8, 2026 - **Apply:** https://www.careerbuilder.com/job-details/cloud-security-penetration-tester-dallas-tx--e3acec94-d39d-4035-8295-444651c8b4e1 ## About the Role Cloud Computing, Penetration Testing, Security Attacks, Penetration Testing, Cloud Computing, Cloud Applications, Application Hosting, Test Automation, Computer Security, Alliance/Partner Marketing, * Minimum of ten years of related work experience, including at least three years in information security. * Undergraduate degree in related field or equivalent combination of training and experience. * Hands-on experience performing penetration testing or offensive security assessments across multiple cloud platforms. * Experience performing cloud, web application, and API penetration testing using tools such as Burp Suite, Pacu, Redboto, CloudBrute, ScoutSuite, and Prowler. * Ability to clearly document and communicate technical vulnerabilities, exploitation scenarios, business impact, and remediation recommendations. * Preferred industry security certifications such as GIAC Cloud Penetration Tester (GCPN), OffSec Certified Professional (OSCP), GIAC Penetration Tester (GPEN), OffSec Web Assessor (OSWA), OffSec Web Expert (OSWE), GIAC Web Application Penetration Tester (GWAPT), etc. ## Description * Plans, leads, and conducts penetration tests across multi-cloud environments and cloud-hosted applications. * Performs manual and automated testing to identify and validate vulnerabilities, misconfigurations, IAM weaknesses, privilege-escalation paths, insecure trust relationships, and cloud attack paths. * Develops detailed assessment reports and presents findings to technical teams and leadership. Leads reporting and collaborates with IT sub-divisions, third-party partners, and business units to identify the impact of technology implementations on IT and business operations. * Leads the evolution of cloud penetration testing methodologies, tooling, automation, standards, and best practices. * Maintains subject matter expertise. Researches emerging cloud vulnerabilities, attack techniques, and offensive security tooling. * Leads the evaluation and onboarding of new tooling, and develops custom tools as needed. * Participates in special projects and performs other duties as assigned.