Penetration Tester

Locke & Mccloud; Georgia (VT); Remote; USD 80,000 - 115,000; Full time

Job summary

A rapidly growing offensive security consultancy is seeking a Web Application Penetration Tester to join their team remotely. The role involves assessing client applications for vulnerabilities and delivering insights, supported by ongoing training and a clear growth path within a collaborative environment.

Benefits

Paid industry certifications and ongoing training

Opportunity to work closely with senior security consultants

Comprehensive benefits package

Qualifications

• Minimum 2 years of hands-on experience in web application penetration testing.
• Solid understanding of web technologies like HTTP, HTML, JavaScript, APIs.
• Familiarity with testing frameworks and vulnerability classifications.

Responsibilities

• Perform web application penetration tests in line with OWASP Top 10.
• Deliver technical reports to stakeholders.
• Collaborate with internal teams to improve methodologies.

Skills

Web technologies

Communication skills

Tools

Burp Suite

OWASP ZAP

Job description

Web Application Penetration Tester

Salary: $80,000 – $115,000 + Benefits

Location: Renoote US

We are working with a rapidly growing offensive security consultancy based in UT, actively seeking aWeb Application Penetration Testerto join their team remotely. This is an exciting opportunity to grow with a company that’s committed to continuous learning, hands-on technical development, and impactful client engagements.

About the Role:

As a Web Application Penetration Tester, you’ll play a key role in assessing the security posture of client applications, identifying vulnerabilities, and delivering actionable insights. You’ll be surrounded by a passionate team of security professionals and supported with paid training, certifications, and a clear path for growth.

Key Responsibilities:

• Perform web application penetration tests in line with OWASP Top 10 and industry best practices.

• Deliver technical reports and articulate findings to both technical and non-technical stakeholders.

• Assist in scoping, planning, and executing client engagements.

• Collaborate with internal teams to improve testing methodologies and tooling.

What We’re Looking For:

• Minimum 2 years of hands-on experience in web application penetration testing (consultancy experience preferred).

• Solid understanding of web technologies (HTTP, HTML, JavaScript, APIs).

• Familiarity with tools such as Burp Suite, OWASP ZAP, and other relevant testing frameworks.

• Strong grasp of the OWASP Top 10 and other common vulnerability classifications.

• Excellent written and verbal communication skills.

What’s On Offer:

• Competitive salary: $80,000 – $115,000 DOE

• Paid industry certifications and ongoing training

• Opportunity to work closely with senior offensive security consultants

• A collaborative, fast-paced environment with room for advancement

• Comprehensive benefits package

Interviews are scheduled to take place next week so if you’re interested in hearing more about this and other roles, then please get in touch asap to discuss further at 480-818-6995 or send your resume to [e-mail]

Locke & McCloud is the US's leading cyber security & information security staffing company – through having a sole focus on the cyber & information security space we have been able to foster solid relationships with some of the US’s most exciting cyber security consultancies & end-users. Our focus on the information security space allows us to be able to help you find the most exciting opportunities in the cyber security market. If you are looking for your next cybersecurity or information security role, please get in touch!