Penetration Tester: External & Web App Security

A-LIGN External; United States; Remote; USD 120,000 - 150,000; Full time

Benefits offered by this job

Health, Dental & Vision

Employer Paid Life Insurance

Disability Insurance

Employee Assistance Program

Pet Insurance

401(k) Plan with Employer Matching

Competitive Bonus Structure

Certification Reimbursement

Career Coaching

Generous Paid Time Off

Office Closure December 25–January 1

Vacation Bonus

Summer Hours

Job summary

Pathfynder by A-LIGN is seeking a Penetration Tester to execute offensive security activities across external networks, web apps, and APIs. You will identify, validate, and manually exploit vulnerabilities, craft remediation guidance, and deliver clear client reports.

You will independently manage projects, communicate findings to clients, and help improve tools and delivery processes while staying current with industry trends.

Qualifications

• Master’s or Bachelor’s degree in cybersecurity, MIS, CS, or related field.
• 2-5 years of hands-on penetration testing experience in external, web, API, or mobile tests.
• Experience producing high-quality client deliverables and communicating findings clearly.

Responsibilities

• Execute external network, web app, and API penetration testing engagements.
• Identify, validate, and manually exploit vulnerabilities.
• Evaluate attack paths and assess business impact of vulnerabilities.
• Compile clear client reports with findings, risk, evidence, and remediation guidance.
• Communicate findings with clients during engagements and walkthroughs.
• Execute projects with minimal oversight while maintaining quality.
• Collaborate with teammates to improve testing tools and methodologies.
• Share knowledge with less-experienced members and clients.
• Maintain knowledge of emerging vulnerabilities and industry trends.

Skills

Offensive security tools

Technical communication

Independent work

Team collaboration

Deadline-driven

Education

Master’s or Bachelor’s degree in cybersecurity/CS

Tools

Nmap

SQLmap

Burp Suite

Postman

Nuclei

Wireshark

Nessus

Caido

Job description

Pathfynder by A-LIGN is seeking a Penetration Tester to execute offensive security activities across external networks, web apps, and APIs. You will identify, validate, and manually exploit vulnerabilities, craft remediation guidance, and deliver clear client reports.

You will independently manage projects, communicate findings to clients, and help improve tools and delivery processes while staying current with industry trends.