Penetration Tester

Apexon; Woodlawn (MD); Sur place; USD 100 000 - 150 000; Plein temps

Avantages offerts par ce poste

Health Insurance

Dental & Vision

401K

Life Insurance

STD/LTD

Paid Vacations

Career Advancement

Skill Development

Résumé du poste

Apexon is seeking a Penetration Tester to conduct web application, infrastructure, and network security testing onsite in Woodlawn, Maryland. The role requires hands-on testing, vulnerability assessments, and clear communication of risks.

OSCP certification is mandatory, with strong emphasis on practical testing across web apps, infrastructure, and networks. The candidate will document findings, propose remediation, and support retesting to ensure vulnerabilities are addressed, in alignment with

Qualifications

• OSCP certification is mandatory.
• Strong experience in web application penetration testing.
• Hands-on experience conducting penetration tests.
• Experience performing vulnerability assessments.
• Ability to assess security weaknesses across web apps, infrastructure and networks.
• Strong analytical and problem-solving skills.
• Ability to document findings and communicate security risks clearly.

Responsabilités

• Conduct web application penetration testing to identify vulnerabilities.
• Perform infrastructure and network penetration testing.
• Execute penetration tests using methodologies and tools.
• Conduct vulnerability assessments and evaluate security risks.
• Analyze findings and document vulnerabilities, impact, and remediation.
• Communicate security findings and collaborate with stakeholders on remediation.
• Support retesting to validate remediation.
• Apply authorized testing practices per rules of engagement.
• Web application, infrastructure, and network testing results.
• Vulnerability assessment findings and supporting evidence.
• Security reports documenting risks, impact, and remediation recommendations.
• Retesting results validating remediation efforts.

Connaissances

OSCP cert

Web app pen testing

Infrastructure pen testing

Vulnerability assessments

Network pen testing

Analytical skills

Documentation

Outils

N/A

Description du poste

Penetration Tester

Position: 1

Work Arrangement: Onsite

Candidate Requirements

• W2 candidates only.
• Active or applicable Public Trust clearance required, as specified for the role.
• OSCP certification is mandatory.
• Must be available to work onsite in Woodlawn, Maryland.

Role Overview

We are seeking a qualified Penetration Tester to conduct web application, infrastructure, and network penetration testing. The ideal candidate will have hands-on experience identifying and assessing security vulnerabilities, evaluating potential risks, and providing findings that help strengthen security controls. An Offensive Security Certified Professional (OSCP) certification is required.

Required Skills

• Mandatory OSCP certification.
• Strong experience in web application penetration testing.
• Hands-on experience conducting penetration tests.
• Experience performing vulnerability assessments.
• Ability to assess security weaknesses across web applications, infrastructure, and networks.
• Strong analytical and problem-solving skills.
• Ability to document findings and communicate security risks clearly.

Preferred Skills

• Experience with red team operations.
• Familiarity with command-and-control (C2) frameworks.
• Experience with malware creation in authorized security testing environments.

Key Responsibilities

• Conduct web application penetration testing to identify and validate security vulnerabilities.
• Perform infrastructure and network penetration testing.
• Execute penetration tests using appropriate methodologies and tools.
• Conduct vulnerability assessments and evaluate potential security risks.
• Analyze findings and document vulnerabilities, their potential impact, and recommended remediation measures.
• Communicate security findings and collaborate with relevant stakeholders on remediation.
• Support retesting activities to validate that identified vulnerabilities have been addressed.
• Apply authorized security testing practices in accordance with project requirements and rules of engagement.
• Web application, infrastructure, and network penetration testing results.
• Vulnerability assessment findings and supporting evidence.
• Security reports documenting risks, impact, and remediation recommendations.
• Retesting results validating remediation efforts.

Our Commitment to Diversity & Inclusion

Did you know that Apexon has been Certified by Great Place To Work, the global authority on workplace culture, in each of the four regions in which it operates: USA for the seventh time in 2026, India for the tenth consecutive time in 2026, the UK for the fourth time in 2026, and Mexico for the second time in 2026.

Apexon is committed to being an equal opportunity employer and promoting diversity in the workplace. We take affirmative action to ensure equal employment opportunity for all qualified individuals. Apexon strictly prohibits discrimination and harassment of any kind and provides equal employment opportunities to all qualified individuals without regard to gender, race, color, ethnicity or national origin, age, disability, religion, sexual orientation, gender identity or expression, veteran status, or any other applicable characteristics protected by law.

You can read about our Job Applicant Privacy policy here: Job Applicant Privacy Policy on apexon.com.

Our Commitment to Environment

Actively contribute to Apexon's commitment to environmental responsibility by following sustainable practices and supporting ESG initiatives.

Our Perks and Benefits

Our benefits and rewards program has been thoughtfully designed to recognize your skills and contributions, elevate your learning experience, and provide care and support for you and your loved ones.

We also offer:

• Health Insurance with Dental & Vision
• 401K Plan
• Life Insurance, STD & LTD
• Paid Vacations & Holidays
• Continuous Skill Based Development and Career Advancement Opportunities