> Markdown version of [/jobs/ext/536230-vapt-specialist](https://www.wearedevelopers.com/jobs/ext/536230-vapt-specialist). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# VAPT Specialist

- **Company:** ControlCase, LLC
- **Location:** United States (Remote available)
- **Experience:** Experienced
- **Contract:** Permanent contract
- **Skills:** Red Team (Cyber Security), Web Applications, GWAPT
- **Published:** June 10, 2026
- **Apply:** https://www.controlcase.com/careers-vapt-specialist/

## About the Role

* 4-5+ years of relevant experience
 * US Citizenship or Green Card holder
 * Ability to travel to client sites, * Bachelor's degree preferred
 * Preferred Certifications:
 + OSCP - Offensive Security Certified Professional
 + CPSA - CREST Practitioner Security Analyst
 + CRT - CREST Registered Tester
 + CRTO - Certified Red Team Operator
 + CRTP - Certified Red Team Professional
 + GWAPT - GIAC Web Application Penetration Tester
 + GPEN - GIAC Penetration Tester
 + GIAC - Global Information Assurance Certification

## Description

As a Vulnerability Assessment and Penetration Testing Specialist, you will conduct authorized penetration tests on computer systems to identify vulnerabilities that could be exploited. You may choose to specialize in areas such as:

 * Networks and Infrastructure
 * Operating Systems (Windows, Linux, and macOS)
 * Web and Mobile Applications
 * APIs and Web Services

The VAPT Lead role will be a blend of approximately 80% penetration testing and 20% project management. It will also involve understanding complex computer systems and technical cybersecurity terminology., * Collaborating with clients to identify their testing requirements, such as the number and type of systems to be tested.

 * Planning and developing penetration testing methods, scripts, and tests.
 * Conducting remote tests on clients' networks or on-site infrastructure tests to uncover security weaknesses.
 * Simulating security breaches to evaluate system vulnerabilities.
 * Preparing detailed reports and recommendations, including identified security issues and their risk levels.
 * Providing actionable advice on mitigating risks and implementing solutions to strengthen system security.
 * Presenting findings, risks, and recommendations to management and other stakeholders.
 * Assessing the business and user impact of identified vulnerabilities.
 * Analyzing how unresolved security flaws could affect business functions.
 * Leading and managing a team of 5-6 members, fostering collaboration and expertise., At ControlCase, we are committed to supporting our employees' success and well-being. We offer a comprehensive range of benefits designed to promote work-life balance and foster professional growth, along with the exciting opportunity to collaborate with an international team across various regions., This is a fully remote position, offering flexibility to work from home. You'll be part of a dynamic international company, ControlCase, collaborating via virtual meetings and teams. You'll manage your own schedule, meet deadlines, and contribute to ControlCase's innovative global efforts in cybersecurity and compliance.


## Related Videos

- [Generate AI in the Browser with Chrome AI - Raymond Camden](https://www.wearedevelopers.com/videos/1770-generate-ai-in-the-browser-with-chrome-ai-raymond-camden)
- [Introduction to Responsible AI: Balancing Value and Risk](https://www.wearedevelopers.com/videos/1972-introduction-to-responsible-ai-balancing-value-and-risk)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see)
- [WebXR: Enabling Virtual and Augmented Reality on the Web](https://www.wearedevelopers.com/videos/965-webxr-enabling-virtual-and-augmented-reality-on-the-web)
- [PET ARENA Season 2.](https://www.wearedevelopers.com/videos/100237-pet-arena-season-2)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [The 8 Best Code Testing Tools](https://www.wearedevelopers.com/magazine/402-the-8-best-code-testing-tools)