Mid-Level Penetration Tester: Web, API & Mobile

Science Applications International Corp.; United States; On-site; USD 100,000 - 160,000; Full time

Job summary

Science Applications International Corp. (SAIC) is seeking a Mid-Level Penetration Tester to join our offensive security practice supporting major state and local government customers.

You will independently conduct security assessments across web applications, networks, APIs, mobile apps, and cloud-hosted systems, delivering actionable remediation guidance. The role requires 5+ years of hands-on cybersecurity experience, strong knowledge of OWASP/WSTG, and experience with Burp Suite, Nmap,

Qualifications

• 5+ years hands-on cybersecurity experience, including 2+ years conducting penetration testing or offensive security assessments.
• Strong knowledge of web application security testing methodologies, including OWASP WSTG and OWASP Top 10.
• CJIS background investigation eligibility and ability to pass CJIS background check.

Responsibilities

• Independently perform penetration testing engagements against web applications, networks, APIs, mobile applications, wireless environments, and cloud-hosted systems using black-box and white-box methods.
• Coordinate with senior team members, project managers, and clients to ensure successful assessment delivery.
• Produce comprehensive technical reports communicating vulnerabilities, business impact, and remediation guidance.
• Lead and mentor junior testers when appropriate.

Skills

Penetration testing

Security assessments

Client communication

Reporting

Education

Bachelor's degree in Cybersecurity or related field

CJIS background check eligibility

OSCP, GWAPT, PNPT, GPEN, OSEP, OSWE, PenTest+ or eJPT/eCPPT certifications (listed)

Tools

Burp Suite Pro

Nmap

Nessus/Tenable

Metasploit

Job description

Science Applications International Corp. (SAIC) is seeking a Mid-Level Penetration Tester to join our offensive security practice supporting major state and local government customers.

You will independently conduct security assessments across web applications, networks, APIs, mobile apps, and cloud-hosted systems, delivering actionable remediation guidance. The role requires 5+ years of hands-on cybersecurity experience, strong knowledge of OWASP/WSTG, and experience with Burp Suite, Nmap,