Penetration Tester

Akkodis; United States; Remote; USD 130,000 - 175,000; Full time

Job summary

Akkodis is seeking a Penetration Tester for a remote position. The ideal candidate will have 3+ years of experience in web and API testing, with strong skills in adversary emulation and communication. This role involves conducting security assessments and developing custom tools to evaluate enterprise security. Join a collaborative team to tackle real-world threats and enhance security posture.

Benefits

Life and AD&D

401k

STD and LTD

PTO

Holiday

Qualifications

• 3+ years of Red Team or offensive security experience.
• Strong knowledge of both Windows and Unix-based systems.

Responsibilities

• Conduct comprehensive security assessments including penetration testing.
• Plan and execute technical testing of web and mobile applications.
• Develop comprehensive and accurate reports for stakeholders.

Skills

Red Team

Communication

Adversary Emulation

Education

Bachelors Degree in technology

Tools

Python

Bash

C/C++

C#

Java

Perl

Ruby

Burp Suite

OWASP ZAP

Nessus

Fortify

Veracode

Metasploit

BloodHound

Nmap

Empire

SQLMap

Job description

Direct message the job poster from Akkodis

Employment Type: Direct Hire

Location: Remote

Salary Range: $130-175k based on experience

• Life and AD&D
• 401k
• STD and LTD
• PTO
• Holiday

***Unable to use C2C applicants***

Summary:

Akkodis is seeking a Penetration Tester for a REMOTE, DIRECT HIRE position. The desired candidate will have 3+ years of web and/or API testing experience. Mobile experience is a huge plus as well!

This role is ideal for professionals who excel at adversary emulation, possess strong communication skills, and can plan and execute advanced attack simulations across complex environments.

You’ll be part of a collaborative team conducting cutting-edge Red Team operations that mimic real-world threats to evaluate the security posture of enterprise environments. Your expertise will support assessments across:

• Web and mobile applications (iOS/Android) (preferred)
• Containerized infrastructure (Docker, Kubernetes)
• Internal and perimeter network infrastructure

This role involves developing custom tools, payloads, and exploits, simulating threat actor TTPs (e.g., MITRE ATT&CK), and delivering clear, actionable findings to both technical and non-technical stakeholders.

Responsibilities:

• Conduct comprehensive security assessments including but not limited to penetration testing, infrastructure vulnerability assessments, systems audits and validating security controls.
• Plan and execute technical testing/assessments of web and mobile applications, containers, and cloud infrastructure, leveraging testing methods and frameworks such as DAST, OWASP Top Ten, and OWASP ZAP.
• Triage, peer review, publish, and communicate findings and recommendations to client stakeholders.
• Leverage automated security testing and monitoring such as integrating CI/CD pipelines.
• Validate security controls around web resources and mobile applications and their backend web services.
• Develop comprehensive and accurate reports and presentations for varied stakeholders.
• Utilize adversarial tradecraft and cyber threat intelligence to design, emulate, and execute realistic assessments, employing both specialized and emerging techniques.
• Perform innovative research and promote an environment of innovation and knowledge sharing.
• Design and propose new penetration assessments based on prior findings and understanding of client infrastructure.
• Custom malware and exploit development.
• Develop/modify custom tooling or processes to solve or improve identified assessment or program needs.

Required Skills:

• Bachelors Degree in technology preferred
• 3+ years of Red Team or offensive security experience
• (or 5+ years in secure application development with relevant security experience)
• Strong knowledge of both Windows and Unix-based systems
• Programming experience in languages like Python, Bash, C/C++, C#, Java, Perl, or Ruby
• Hands-on experience with DAST tools (e.g., Burp Suite, OWASP ZAP, Nessus, Fortify, Veracode)
• Proficiency with offensive tools: Metasploit, BloodHound, Nmap, Empire, SQLMap, etc.

Preferred Qualifications:

• Experience reverse engineering mobile apps (iOS/Android), including anti-emulation and obfuscation
• Familiarity with container security (Docker, Kubernetes)
• Knowledge of cloud penetration testing (AWS, Azure, Oracle)
• Certifications such as OSCP, OSCE, GWAPT, GPEN, GXPN, CRTO, etc.
• Contributions to the security community (e.g., CVEs, bug bounties, open-source projects)
• Experience identifying and exploiting API vulnerabilities
• Proficiency with DevOps tools: GitLab, docker-compose, cross-compilation pipelines
• Understanding of regulatory standards like GDPR, PCI-DSS

If you are interested in this Penetration Tester Job, then please click apply through Akkodis.

Equal Opportunity Employer/Veterans/Disabled

To read our Candidate Privacy Information Statement, which explains how we will use your information, please visit https://www.modis.com/en-us/candidate-privacy/

The Company will consider qualified applicants with arrest and conviction records.

Seniority level

• Seniority level

  Mid-Senior level

Employment type

• Employment type

  Full-time

Job function

• Job function

  Analyst, Information Technology, and Strategy/Planning

• Industries

  IT Services and IT Consulting, Security and Investigations, and Computer and Network Security

Referrals increase your chances of interviewing at Akkodis by 2x

Get notified about new Penetration Tester jobs in United States.

Cyber Security Detection Engineer - (Fulltime)100% Remote

Penetration Tester – Cybersecurity Specialist

Vulnerability Assessment and Penetration Tester

United States
$85,000.00
-
$110,000.00
10 hours ago

CYBERSECURITY CERTIFICATION AND ACCREDITATION ANALYST

United States
$100,000.00
-
$140,000.00
3 months ago

Consultant, Penetration Tester - Compliance Security

United States
$64,000.00
-
$117,000.00
1 week ago

San Francisco, CA
$139,100.00
-
$206,000.00
2 weeks ago

United States
$120,000.00
-
$160,000.00
3 weeks ago

United States
$150,000.00
-
$240,000.00
1 month ago

DevSecOps Engineer with Cyber Security Detection Experience -100% Remote

United States $65,000 - $75,000 3 days ago

Information Security Engineer - (Remote - Worldwide)

Application Security Engineer [Remote-US]

We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.