> Markdown version of [/jobs/ext/565836-consultant-penetration-tester](https://www.wearedevelopers.com/jobs/ext/565836-consultant-penetration-tester). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Consultant, Penetration Tester

- **Company:** IBA InfoTech Inc.
- **Location:** Westminster, CO, United States
- **Experience:** Experienced
- **Contract:** Permanent contract
- **Skills:** Software System Penetration Testing, Bash Shell, Code Review, Cyber Security, Python (Programming Language), Windows PowerShell, Red Team (Cyber Security), Ruby, Web Applications, Scripting
- **Published:** June 14, 2026
- **Apply:** https://ibainfotech.com/consultant-penetration-tester

## About the Role

Primary Skills : Offensive Security Certified Professional, Information Security, Penetration Testing, Ruby, PowerShell, Network, CISSP, NIST, GPEN, Python, * 2-3 years' experience in information security with web application and/or network penetration testing experience

 * Hands-on experience with two or more scripting languages such as Python, Powershell, Shell, or Ruby
 * Hands-on experience engaging clientele in consulting-related environments
 * An aptitude for technical writing, including assessment reports, presentations and operating procedures
 * Strong understanding of security principles, policies and industry best practices

## Description

* Conduct network and web application penetration testing, code reviews, and social engineering
 * Participate in red team engagements
 * Conduct security assessments on a wide variety of technologies and implementations
 * Simulate sophisticated cyberattacks to identify vulnerabilities for clients worldwide


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Coffee with Developers: David Heinemeier Hansson](https://www.wearedevelopers.com/videos/875-coffee-with-developers-david-heinemeier-hansson)
- [Old tools, new tricks](https://www.wearedevelopers.com/videos/1916-old-tools-new-tricks)
- [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java)
- [Securing Your Web Application Pipeline From Intruders](https://www.wearedevelopers.com/videos/53-securing-your-web-application-pipeline-from-intruders)
- [Coroutine explained yet again 60 years later](https://www.wearedevelopers.com/videos/690-coroutine-explained-yet-again-60-years-later)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [The 8 Best Code Testing Tools](https://www.wearedevelopers.com/magazine/402-the-8-best-code-testing-tools)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Should senior developers refuse interview coding challenges?](https://www.wearedevelopers.com/magazine/29-should-senior-developers-refuse-interview-coding-challenges)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)