Penetration Tester – Application, API, Cloud & AI Security

VMC Soft Technologies, Inc; United States; Remote; USD 90,000 - 130,000; Full time

Job summary

VMC Soft Technologies, Inc is seeking a Remote Penetration Tester with 3+ years of hands-on experience to perform security assessments across web apps, APIs, networks, and cloud environments. You will apply industry-standard testing methodologies and document findings.

The role requires strong familiarity with security tools (Nessus, Nmap, Wireshark, Qualys), scripting (Python, PowerShell, Bash), and threat analysis.

Qualifications

• Minimum 3+ years of experience in conducting penetration testing and vulnerability assessments.
• Experience testing web applications, APIs, networks, and cloud environments.
• Hands-on experience with industry-standard security testing tools and exploit frameworks.
• Experience identifying, validating, and documenting security vulnerabilities.
• Exposure to secure coding practices and application security concepts.
• Experience preparing security assessment reports and presenting findings to stakeholders.
• Understanding of cybersecurity threats, attack methodologies, and defense mechanisms.
• Relevant certifications such as CEH, OSCP, GPEN, and PNPT are preferred.

Skills

Penetration testing

Vulnerability assessments

Web application testing

APIs testing

Network testing

Cloud security testing

Security tooling

Threat analysis

Security reporting

Stakeholder communication

Tools

Nessus

Qualys

Nmap

Wireshark

Kali Linux

Python

PowerShell

Bash/Shell

Job description

JD

Remote role

PEN Tester

Minimum 3+ years of experience in conducting penetration testing and vulnerability assessments.

Experience testing web applications, APIs, networks, and cloud environments.

Hands-on experience with industry-standard security testing tools and exploit frameworks.

Experience identifying, validating, and documenting security vulnerabilities.

Exposure to secure coding practices and application security concepts.

Experience preparing security assessment reports and presenting findings to stakeholders.

Understanding of cybersecurity threats, attack methodologies, and defense mechanisms.

Relevant certifications such as CEH, OSCP, GPEN, and PNPT are preferred.

• API Security Testing and Network Penetration Testing,
• Vulnerability Assessment & Management
• Cloud Security Testing (AWS/Azure/GCP)
• Mobile Application Security Testing (Android/iOS)
• Active Directory Security Assessment
• Security Risk Assessment and Threat Analysis
• Nessus, Qualys, Nmap, Wireshark
• Kali Linux and Security Toolsets
• Python, PowerShell, Bash/Shell Scripting
• Understanding of Security Frameworks (OWASP, PTES, NIST)
• Security Reporting and Remediation Recommendations
• Knowledge of Compliance Standards (ISO 27001, PCI-DSS, SOC2)
• AI enabled pen testing