Onsite_ Penetration Tester_ Chaska, MN

THEMESOFT; Chaska (MN); On-site; USD 90,000 - 130,000; Full time

Job summary

Themesoft Inc in the United States is seeking a Senior Security Consultant specializing in penetration testing and vulnerability assessments. You will test web applications, APIs, networks, and cloud environments, and report findings to stakeholders.

Ideal candidates have 3+ years of hands-on experience with security tools (Burp Suite, Nmap, Nessus) and certifications such as CEH or OSCP. You will support secure software development and drive remediation efforts across teams.

Qualifications

• Minimum 3+ years in penetration testing and vulnerability assessments.
• Experience testing web applications, APIs, networks, and cloud environments.
• Hands-on with industry-standard security testing tools and exploit frameworks.
• Ability to identify, validate, document vulnerabilities and present findings.
• Familiarity with secure coding practices and application security concepts.
• Certs preferred: CEH, OSCP, GPEN, PNPT.
• Experience with security reporting and remediation recommendations.

Responsibilities

• Use AI/GenAI to accelerate penetration-testing activities such as reconnaissance, test-case generation, analysis, scripting, and reporting.
• Conduct security testing of web applications, APIs, networks, cloud environments, and systems.
• Identify, validate, and document security vulnerabilities and weaknesses.
• Perform controlled exploitation to assess impact and risk.
• Execute vulnerability assessments using manual and automated testing tools.
• Prepare detailed security assessment reports with remediation recommendations.
• Collaborate with development and infrastructure teams to resolve security issues.
• Conduct security reviews to ensure compliance with standards.
• Support secure software development and security best practices

Skills

Penetration testing

Vulnerability assessment

Web/API testing

Network testing

Cloud security testing

Security tooling

Security reporting

MITRE ATLAS

Python

PowerShell

Tools

Burp Suite Pro

OWASP ZAP

Metasploit

Nessus

Qualys

Nmap

Wireshark

Kali Linux

Python

PowerShell

Bash

Job description

Primary Skills: Advanced Penetration Testing & Vulnerability Assessment,
Minimum 3+ years of experience in conducting penetration testing and vulnerability assessments.
Experience testing web applications, APIs, networks, and cloud environments.
Hands-on experience with industry-standard security testing tools and exploit frameworks.
Experience identifying, validating, and documenting security vulnerabilities.
Exposure to secure coding practices and application security concepts.
Experience preparing security assessment reports and presenting findings to stakeholders.
Understanding of cybersecurity threats, attack methodologies, and defense mechanisms.
Relevant certifications such as CEH, OSCP, GPEN, and PNPT are preferred.
Web Application Penetration Testing (OWASP Top 10) API Security Testing and Network Penetration Testing, Vulnerability Assessment & Management Cloud Security Testing (AWS/Azure/GCP) Mobile Application Security Testing (Android/iOS) Active Directory Security Assessment Security Risk Assessment and Threat Analysis Burp Suite Professional, OWASP ZAP, Metasploit Nessus, Qualys, Nmap, Wireshark Kali Linux and Security Toolsets Python, PowerShell, Bash/Shell Scripting Understanding of Security Frameworks (OWASP, PTES, NIST) Security Reporting and Remediation Recommendations Knowledge of Compliance Standards (ISO 27001, PCI-DSS, SOC2)
• Ability to assess prompt injection, insecure model/application interactions, sensitive information exposure, excessive agency and other LLM application risks
• Ability to identify attack surfaces across models, data, applications, APIs, RAG pipelines and agents using frameworks such as MITRE ATLAS
• Ability to use approved LLM/AI tools for test-case generation, reconnaissance analysis, vulnerability analysis, scripting and report generation

Roles and Responsibilities:

• Uses AI/GenAI to accelerate penetration-testing activities, such as reconnaissance, test-case generation, analysis, scripting, and reporting.
• Conduct security testing of web applications, APIs, networks, cloud environments, and systems.
• Identify, validate, and document security vulnerabilities and weaknesses.
• Perform controlled exploitation to assess the impact and risk of vulnerabilities.
• Execute vulnerability assessments using manual and automated testing tools.
• Prepare detailed security assessment reports with remediation recommendations.
• Collaborate with development and infrastructure teams to resolve security issues.
• Conduct security reviews to ensure compliance with organizational and industry standards.
• Support secure software development and security best practices

Work Authorization

Applicants must be legally authorized to work in the United States.

Equal Employment Opportunity

Themesoft Inc is an Equal Employment Opportunity employer. We consider qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, or any other status protected by applicable federal, state, or local law.

Skills :

TESTING,AZURE,OSCP,VULNERABILITY,POWERSHELL,PENETRATION TESTING,PYTHON,IOS,NMAP,APIS,AUTOMATED TESTING,AWS,CEH