Penetration Tester

Ringside Talent; Columbus (OH); Hybrid; USD 90,000 - 130,000; Full time

Benefits offered by this job

OSCP/GPEN sponsorship

Hands-on security culture

Job summary

Ringside Talent seeks a Penetration Tester to actively probe, exploit, and strengthen defenses across web apps, APIs, networks, and infrastructure in a hybrid Columbus, OH setting.

The role emphasizes hands-on offensive security work, clear risk communication, and collaboration with security and engineering teams to drive remediation and testing cycles.

Qualifications

• 3–5+ years hands-on penetration testing experience.
• Experience testing web apps, APIs, networks and infrastructure.
• Proficiency with Burp Suite, Metasploit, Nmap and Kali Linux.
• Solid understanding of MITRE ATT&CK and OWASP testing.
• Excellent documentation and communication to explain risk.

Responsibilities

• Conduct penetration tests across web apps, APIs, networks, and infrastructure.
• Use offensive security tools to identify and exploit vulnerabilities in a controlled, methodical way.
• Apply MITRE ATT&CK and OWASP to guide testing and attack path analysis.
• Perform manual vulnerability validation to confirm exploitability and risk.
• Document findings clearly, translating vulnerabilities into business risk.
• Provide actionable remediation recommendations to technical teams.
• Collaborate with security and engineering to retest fixes.
• Stay current on emerging attack techniques and trends.
• Support red team exercises or specialized engagements as needed.

Skills

Penetration testing

Web/API/Network testing

Burp Suite

Metasploit

Nmap

Kali Linux

MITRE ATT&CK

OWASP

Documentation

Communication

Tools

Burp Suite

Metasploit

Nmap

Kali Linux

Job description

We are looking for a Penetration Tester to work for our client. The ideal candidate aligns with the responsibilities and qualifications outlined below.

This is a great opportunity for an offensive security professional to actively probe, exploit, and help strengthen an organization's defenses across a wide range of environments, in a hybrid role based in Columbus, OH.

Responsibilities

• Conduct penetration tests across web applications, APIs, networks, infrastructure, and other enterprise environments
• Use offensive security tools and techniques to identify and exploit vulnerabilities in a controlled, methodical manner
• Apply frameworks such as MITRE ATT&CK and OWASP to guide testing methodology and attack path analysis
• Perform manual vulnerability validation to confirm real-world exploitability and risk
• Document findings clearly, translating technical vulnerabilities into business risk that resonates with stakeholders
• Provide actionable, prioritized remediation recommendations to technical teams
• Collaborate with security and engineering teams to retest and validate fixes
• Stay current on emerging attack techniques, tools, and vulnerability trends
• Support red team exercises or specialized engagements as needed

Qualifications

• 3-5+ years of hands-on penetration testing, offensive security, or ethical hacking experience
• Experience testing across web applications, APIs, networks, and broader infrastructure
• Hands-on proficiency with tools such as Burp Suite, Metasploit, Nmap, Kali Linux, or similar
• Strong understanding of MITRE ATT&CK, OWASP, exploitation techniques, and attack path analysis
• Excellent documentation and communication skills, with the ability to explain risk to technical audiences

What Our Client Offers

• Genuine offensive security work across diverse environments, not a single narrow testing scope
• Support for pursuing advanced certifications like OSCP or GPEN
• Direct influence over how findings translate into real remediation, not just report delivery
• A security team that values curiosity and hands-on technical depth