Penetration Tester

Themesoft Inc; Chaska (MN); On-site; USD 70,000 - 95,000; Full time

Job summary

Themesoft Inc. is seeking a Penetration Tester for an onsite contract in Chaska, MN, lasting 6-12+ months. You will conduct comprehensive security testing across web apps, APIs, networks, and cloud environments using industry-standard tools and AI-assisted methods.

You will prepare detailed reports with remediation guidance and work with development and infra teams to fix findings. Requirements include 3+ years of advanced penetration testing and vulnerability assessment experience, hands-on

Qualifications

• 3+ years of hands-on penetration testing and vulnerability assessments.
• Experience testing web apps, APIs, networks, and cloud environments.
• Hands-on use of industry-standard security testing tools and exploit frameworks.
• Ability to identify, validate, and document security vulnerabilities.
• Exposure to secure coding practices and application security concepts.
• Experience producing security assessment reports and presenting findings to stakeholders.

Responsibilities

• Use AI/GenAI to speed up penetration testing across the lifecycle, including reconnaissance, test-case generation, analysis, scripting, and reporting.
• Conduct security testing for web applications, APIs, networks, cloud environments, and systems.
• Identify, validate, and document security vulnerabilities and weaknesses.
• Perform controlled exploitation to evaluate impact and risk of findings.
• Run vulnerability assessments using manual and automated testing approaches and tools.
• Create detailed security assessment reports with remediation recommendations.
• Partner with development and infrastructure teams to help resolve security issues.
• Conduct security reviews to support organizational and industry compliance requirements.
• Support secure software development and security best practices.

Skills

Penetration testing

Vulnerability assessment

Tools

Burp Suite Professional

OWASP ZAP

Metasploit

Nessus

Qualys

Nmap

Wireshark

Kali Linux

Python

PowerShell

Bash/Shell Scripting

MITRE ATLAS

Job description

Penetration Tester contract opportunity based in Chaska, MN (onsite) with Themesoft Inc for 6-12+ months.

Responsibilities

• Use AI/GenAI to speed up penetration testing across the lifecycle, including reconnaissance, test-case generation, analysis, scripting, and reporting.
• Conduct security testing for web applications, APIs, networks, cloud environments, and systems.
• Identify, validate, and document security vulnerabilities and weaknesses.
• Perform controlled exploitation to evaluate impact and risk of findings.
• Run vulnerability assessments using manual and automated testing approaches and tools.
• Create detailed security assessment reports with remediation recommendations.
• Partner with development and infrastructure teams to help resolve security issues.
• Conduct security reviews to support organizational and industry compliance requirements.
• Support secure software development and security best practices.

Requirements

• Advanced Penetration Testing & Vulnerability Assessment.
• Minimum 3+ years experience performing penetration testing and vulnerability assessments.
• Experience testing web applications, APIs, networks, and cloud environments.
• Hands-on use of industry-standard security testing tools and exploit frameworks.
• Ability to identify, validate, and document security vulnerabilities.
• Exposure to secure coding practices and application security concepts.
• Experience producing security assessment reports and presenting findings to stakeholders.
• Understanding of cybersecurity threats, attack methodologies, and defense mechanisms.
• Preferred certifications: CEH, OSCP, GPEN, PNPT.
• Ability to assess prompt injection, insecure model/application interactions, sensitive information exposure, excessive agency, and other LLM application risks.
• Ability to identify attack surfaces across models, data, applications, APIs, RAG pipelines, and agents, using frameworks such as MITRE ATLAS.
• Ability to use approved LLM/AI tools for test-case generation, reconnaissance analysis, vulnerability analysis, scripting, and report generation.

Technologies

• Burp Suite Professional, OWASP ZAP
• Metasploit, Nessus, Qualys
• Nmap, Wireshark, Kali Linux
• Python, PowerShell, Bash/Shell Scripting
• OWASP, PTES, NIST, MITRE ATLAS
• AWS, Azure, GCP
• Android, iOS
• Active Directory
• ISO 27001, PCI-DSS, SOC2

Work Authorization

• Applicants must be legally authorized to work in the United States.

Equal Employment Opportunity

• Themesoft Inc is an Equal Employment Opportunity employer.
• Considers qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, or any other status protected by applicable federal, state, or local law.

Compensation: USD 60 per hour | Experience: 3+ years | Job Type: Contract | Location: Chaska, MN (onsite)