Information Security Analyst: Senior- Penetration Tester

Cook Systems, Inc.; San Antonio (TX); On-site; USD 110,000 - 170,000; Full time

Benefits offered by this job

Medical coverage through BCBS

Dental and vision coverage

Life insurance

Flexible Spending Account

401(k) retirement plan

Job summary

Cook Systems is seeking an experienced Information Security Analyst—Senior Penetration Tester to support the automation and scaling of our Bug Bounty program. The selected candidate will validate and triage findings, ingest confirmed issues into our enterprise ticketing system, and help establish processes that enable AI-driven validation and prioritization of findings.

Responsibilities include web app and infrastructure testing, triage using CVSS/DREAD, collaboration with developers to

Qualifications

• Experience web/app and infrastructure penetration testing.
• Ability to triage and contextualize findings with CVSS/DREAD.
• Partner with developers to remediate vulnerabilities and provide secure coding guidance.
• Validate and reproduce bug bounty submissions, identifying FP and duplicates.
• Familiarity with vulnerability management and ticketing platforms (ServiceNow, Jira, Azure DevOps).
• Leverage scripting, automation, APIs or AI-assisted workflows (Python, PowerShell, LLM tooling).
• Certifications such as GPEN, OSCP, PenTest+ or equivalent credentials.

Responsibilities

• Conduct web application and infrastructure penetration testing.
• Validate and reproduce bug bounty submissions and triage findings.
• Triaging findings using industry-standard frameworks (CVSS, DREAD).
• Collaborate with developers to remediate vulnerabilities and guide secure coding.
• Ingest confirmed issues into enterprise ticketing systems.
• Establish processes for AI-driven validation and prioritization of findings.
• Utilize scripting, automation, APIs or AI-driven workflows for efficiency.

Skills

Penetration testing

Bug bounty triage

Vulnerability management

Developer collaboration

Automation scripting

CVSS/DREAD

AI workflows

LLM tooling

GPEN/OSCP/PenTest+

Tools

ServiceNow

Jira

Azure DevOps

Job description

Information Security Analyst: Senior- Penetration Tester

About Cook Systems

For over 30 years, Cook Systems has partnered with organizations across the country to solve technology challenges and build strong technology teams. As a veteran-owned IT consulting company, we combine decades of industry experience with a continued focus on how technology, AI, and the way people work are evolving.

Our work spans technology consulting, talent development, and AI-enabled solutions. We value people who take ownership, adapt quickly, communicate well, and care about the quality of their work. Whether you’re early in your career or bringing years of experience, you’ll have the opportunity to keep building your skills, contribute to meaningful client work, and grow with a company that continues to evolve with the industry.

Summary: We are seeking an experienced Penetration Tester to support the automation and scaling of our Bug Bounty program. The selected candidate will be responsible for validating and triaging findings, ingesting confirmed issues into our enterprise ticketing system, and helping to establish processes that enable AI-driven validation and prioritization of findings.

Responsibilities:

• Conduct web application and infrastructure penetration testing.
• Validate and reproduce bug bounty submissions, identifying false positives and duplicate findings.
• Triaging and contextualizing security findings using industry-standard frameworks such as CVSS, DREAD, or similar methodologies.
• Partner with developers to remediate vulnerabilities and provide secure coding guidance.
• Ingest confirmed issues into our enterprise ticketing system.
• Establish processes for AI-driven validation and prioritization of findings.
• Leverage scripting, automation, APIs, or AI-assisted workflows for process efficiency.

Required Qualifications:

• Web application and infrastructure penetration testing experience.
• Experience triaging and contextualizing security findings using industry-standard frameworks such as CVSS, DREAD, or similar methodologies.
• Experience partnering with developers to remediate vulnerabilities and provide secure coding guidance.
• Experience validating and reproducing bug bounty submissions, including identifying false positives and duplicate findings.
• Familiarity with vulnerability management and ticketing platforms (ServiceNow, Jira, Azure DevOps, or similar).
• Experience leveraging scripting, automation, APIs, or AI-assisted workflows (Python, PowerShell, LLM-based tooling, etc.).
• Certifications such as GPEN, OSCP, PenTest+, or equivalent industry-recognized credentials.

Benefits at Cook Systems

We want our employees to have benefits that support their health, financial well-being, and life outside of work. Eligible Cook Systems employees have access to a comprehensive benefits package beginning the first of the month following their hire date, including:

• Medical coverage through Blue Cross Blue Shield, with two plan options
• Dental and vision coverage
• Life, critical illness, and accident insurance through Unum
• Flexible Spending Account and Dependent Care FSA options through Navia
• Health Gap Insurance through Sun Life
• 401(k) retirement plan through The Standard, with eligibility after six months

Beyond benefits, Cook Systems is a place where we expect people to take ownership of their work, communicate openly, continue learning, and contribute to the teams and clients they support.

We have been building technology careers and client partnerships for more than three decades, and we continue to evolve with the industry. If you’re looking for an opportunity to do meaningful work, develop your capabilities, and be part of what comes next in technology, we’d like to hear from you.