Penetration Tester: Cloud, Network & Web Security

Taylor Corporation; North Mankato (MN); On-site; USD 97,000 - 120,000; Full time

Job summary

Taylor Corporation is seeking a Mid-level Penetration Tester to perform tests across network, web, API, cloud, and wireless environments in alignment with industry standards and regulatory requirements.

The role requires hands-on experience with Windows and Linux, risk assessment, and secure development practices, with the ability to clearly communicate risk and remediation options to stakeholders. Expect standard M-F hours with limited travel.

Qualifications

• Minimum of three years of hands-on penetration testing experience in enterprise environments.
• Experience with common penetration testing tools such as Nmap, Burp Suite, Nessus, Metasploit, Kali Linux.
• Knowledge of authenticated and unauthenticated testing methods, risk-based reporting, and secure development practices.

Responsibilities

• Design and perform internal and external network, web application, API, cloud, wireless, and segmentation penetration tests and vulnerability assessments.
• Validate findings through controlled exploitation and manual testing to confirm true vulnerabilities.
• Develop test plans, conduct reconnaissance, and communicate results with remediation guidance.
• Create detailed technical reports and concise executive summaries for management.
• Maintain test procedures and templates; review others’ reports and provide input where needed.
• Report residual risk and security exposures to management and stakeholders.

Skills

Penetration testing

Networking

Cloud environments

Scripting

Written communication

Risk assessment

Education

OSCP

PNPT

GPEN

GWAPT

eWPT

Tools

Nmap

Burp Suite Pro

HCL AppScan

Nessus

Metasploit

Kali Linux

Job description

Taylor Corporation is seeking a Mid-level Penetration Tester to perform tests across network, web, API, cloud, and wireless environments in alignment with industry standards and regulatory requirements.

The role requires hands-on experience with Windows and Linux, risk assessment, and secure development practices, with the ability to clearly communicate risk and remediation options to stakeholders. Expect standard M-F hours with limited travel.