Penetration Tester — Hybrid (Columbus, OH)

Ringside Talent Acquisition Partners; Columbus (OH); Hybrid; USD 90,000 - 140,000; Full time

Job summary

Ringside Talent Acquisition Partners seeks a Penetration Tester to proactively assess security across web applications, APIs, networks, and infrastructure in a hybrid role based in Columbus, OH.

You will apply MITRE ATT&CK and OWASP frameworks, perform manual validation, and translate findings into actionable remediation for technical teams. Strong communication is essential to convey risk to stakeholders.

Qualifications

• 3-5+ years of hands-on penetration testing, offensive security, or ethical hacking experience.
• Experience testing web apps, APIs, networks, and infrastructure.
• Familiarity with MITRE ATT&CK and OWASP testing approaches.
• Strong written and verbal communication to explain risk to technical stakeholders.

Responsibilities

• Conduct penetration tests across web applications, APIs, networks, infrastructure, and other enterprise environments
• Use offensive security tools and techniques to identify and exploit vulnerabilities in a controlled, methodical manner
• Apply frameworks such as MITRE ATT&CK and OWASP to guide testing methodology and attack path analysis
• Perform manual vulnerability validation to confirm real-world exploitability and risk
• Document findings clearly, translating technical vulnerabilities into business risk that resonates with stakeholders
• Provide actionable, prioritized remediation recommendations to technical teams
• Collaborate with security and engineering teams to retest and validate fixes
• Stay current on emerging attack techniques, tools, and vulnerability trends
• Support red team exercises or specialized engagements as needed

Skills

Penetration testing

Documentation

Offensive security

Communication

Tools

Burp Suite

Metasploit

Nmap

Kali Linux

Job description

Ringside Talent Acquisition Partners seeks a Penetration Tester to proactively assess security across web applications, APIs, networks, and infrastructure in a hybrid role based in Columbus, OH.

You will apply MITRE ATT&CK and OWASP frameworks, perform manual validation, and translate findings into actionable remediation for technical teams. Strong communication is essential to convey risk to stakeholders.