Lead Offensive Security Tester — External/Web/API

A-LIGN; Tampa (FL); Remote; USD 120,000 - 170,000; Full time

Benefits offered by this job

Healthcare benefits

401(k) Plan

Competitive bonus structure

Technology allowance

Certification reimbursement

Personalized career coaching

Generous PTO

Vacation bonus

Summer hours

Job summary

Pathfynder by A-LIGN seeks an experienced Penetration Tester to perform external network, web application, and API security testing for diverse clients. You will identify real-world risks, manually exploit vulnerabilities, and deliver remediation guidance with clear client communication.

You will mentor junior testers, contribute to repeatable testing practices, and help grow our offensive security offerings in a fast-paced, remote environment.

Qualifications

• Degree in cybersecurity, computer science, or related field, or equivalent professional experience.
• 5+ years hands-on offensive security with external network, web app, or API testing.
• Experience with black-box, grey-box, and white-box testing approaches.
• Experience testing APIs including REST/GraphQL/SOAP/gRPC.
• Ability to manage engagements from scoping to reporting and client debriefs.

Responsibilities

• Execute external network, web application, and API penetration testing engagements.
• Identify, validate, and manually exploit vulnerabilities using public exploits or custom exploits.
• Evaluate findings, develop realistic attack paths, and assess risk.
• Deliver client-ready reports with findings, risk ratings, evidence, and remediation guidance.
• Communicate testing results to client stakeholders and maintain project timelines.
• Collaborate with offensive security team to improve tools and methods.
• Mentor junior testers and contribute to team capability development.

Skills

Penetration testing

Web application security

API security

OWASP

Public exploits

Education

Degree in cybersecurity or related field

Tools

Burp Suite

Nmap

Nessus

OWASP Testing Guide tools

Job description

Pathfynder by A-LIGN seeks an experienced Penetration Tester to perform external network, web application, and API security testing for diverse clients. You will identify real-world risks, manually exploit vulnerabilities, and deliver remediation guidance with clear client communication.

You will mentor junior testers, contribute to repeatable testing practices, and help grow our offensive security offerings in a fast-paced, remote environment.