Penetration Tester (Application Security)

Location: Fully remote within Florida or Texas

Company

Provides expert-level penetration testing services focused on identifying overlooked weaknesses and helping clients improve application and infrastructure security.

What you will do

• Perform penetration testing of web applications, mobile applications, thick clients, and APIs.
• Conduct source-code reviews and white-box penetration testing to prove the impact of application flaws.
• Reverse-engineer mobile and thick-client applications and chain application flaws into cloud or on-premises Active Directory infrastructure when appropriate.
• Perform SAST and DAST on enterprise, SaaS, and custom in-house applications, including scanner validation and false-positive elimination.
• Prepare detailed reports covering impactful findings and remediation guidance.
• Debrief findings for both technical and executive audiences.

Requirements

• Must be located in Florida or Texas.
• OSCP or demonstrated Burp Suite expertise is mandatory.
• Experienced developer or application security tester with solid working knowledge of C, C#, Python, Objective-C, Java, JavaScript, SQL, and frameworks such as AngularJS.
• Familiarity with XML, JSON, SOAP, REST, AJAX, and web services.
• Understanding of AI and LLM weaknesses and flaws in applications.
• Extensive experience using an attack proxy such as Burp Suite.
• At least two years of experience handling information security-related tasks.
• Post-secondary college or university degree.
• Ability to communicate effectively with clients, project managers, and teammates; deliver dependable, thorough work; adapt to changing consulting environments; and continue developing cybersecurity expertise.
• Strong understanding of OWASP for web, API, mobile, and AI/LLM security.

Nice to have

• Three to five years of experience in penetration testing and consulting.
• Professional qualifications including OSCP, OSWE, or BSCP.

Culture & Benefits

• Flexible fully remote work within Texas or Florida.
• Collaboration with highly skilled security professionals focused on technical excellence and quality execution.
• Paid education and professional development reimbursement for learning, certifications, and technical growth.
• Competitive compensation and growth opportunities.
• Paid volunteer day, paid birthday day off, and paid U.S. public holidays.
• At-will employment.