Penetration Tester (Texas/Florida)

Packetlabs Ltd.; United States; Remote; USD 120,000 - 180,000; Full time

Job summary

Packetlabs is seeking an experienced developer/application security tester to join our remote team focused on high‑quality penetration testing across web, mobile, and API surfaces. You’ll review source code, reverse engineer apps, and chain flaws to broader infrastructure while delivering actionable remediation reports.

Strong knowledge of C/C#, Python, Java, JavaScript, SQL, and AngularJS is required, along with familiarity with XML/JSON/SOAP/REST/AJAX.

Qualifications

• Solid working knowledge of programming languages including C, C#, Python, Objective-C, Java, JavaScript, SQL and AngularJS.
• Familiarity with XML, JSON, SOAP, REST, and AJAX.
• Understanding of AI/LLM weaknesses in applications.
• Extensive experience with an attack proxy (Burp Suite).
• OSCP or Burp is mandatory for our organization.

Responsibilities

• Penetration testing of web applications, mobile applications, thick clients, and APIs.
• Source code review and whitebox testing to prove impact of flaws.
• Reverse engineering of mobile and thick client applications.
• Chain application flaws to cloud and on-prem AD infrastructure where applicable.
• Develop detailed reports on findings and remediations for impactful findings.
• Learn to debrief findings at technical and executive levels.
• Perform SAST and DAST on enterprise, SaaS, and in-house applications.
• Experience using scanners and knowledge of validation and elimination of false positives.
• Strong understanding of OWASP across Web, API, Mobile, and AI/LLM domains.

Skills

Programming languages: C

C#

Python

Objective-C

Java

JavaScript

SQL

AngularJS

Penetration testing

AI/LLM weaknesses

Education

Post-secondary degree

Tools

Burp Suite

Job description

Packetlabs was built by an ethical hacker after seeing vulnerability assessments presented as penetration tests. Our slogan "Ready for more than a VA scan?" drives at the importance of not providing our clients with a false sense of security. We are a passionate team of highly trained, proactive, penetration testers. We provide expert-level penetration testing services that are thorough and tailored to help foster a safe digital space where everyone has the right to privacy and security. Packetlabs consultants find weaknesses others overlook and continuously learn new ways to evade controls. We hold ourselves to a very high standard. To do so, we only hire individuals with the same drive and passion.

Core Values

• You have a customer-first mentality.
• Is a great communicator with clients, project managers, and teammates.
• Rapid responses and on time.
• You deliver work that you take pride in.
• Your work is an autograph of your excellence.
• You dig deeper into every finding.
• Doesn't stop until impact is proven.
• You are comfortable being uncomfortable.
• Goes towards obstacles, not away from them.
• Consulting isn't your typical job and requires adapting to rapidly changing environments.
• You are always learning. Cybersecurity is changing every day, and you need to keep up or want to keep up.
• Be deeply aware of your skillset and be willing to improve.
• You are Self-motivated and dependable.
• You are humble.
• Egos don't have a place at Packetlabs.

Education and Experience

We are looking for an experienced developer/application security tester to join our team:

• Solid working knowledge of programming languages, including C, C#, Python, Objective-C, Java, JavaScript, SQL, and frameworks like AngularJS.
• Familiarity with web services and data exchange formats such as XML, JSON, SOAP, REST, and AJAX.
• Understanding of AI/LLM weaknesses and flaws in applications.
• Extensive experience/expertise in using an attack proxy (e.g. Burp Suite).
• Preferred if you have 3 - 5 years of experience working in penetration testing and consulting.
• A graduate of a post-secondary college or university degree program.
• Has at least two years of experience dealing with information security-related tasks.
• Has professional qualifications (one or more): OSCP, OSWE, BSCP.
• OSCP or Burp is mandatory for our organization.
• You must be located in Florida or Texas.

What You'll Be Doing

• Your primary role is to perform penetration testing of web applications, mobile applications, thick clients, and APIs.
• Source code review and whitebox penetration testing to prove the impact of application flaws.
• Reverse engineering of mobile and thick client applications.
• You sometimes chain application flaws to other areas, such as cloud and on-prem AD infrastructure.
• Opportunities for lateral movement into the infrastructure teams are limited and given at the manager's discretion.
• Develop detailed reports on findings and remediations for impactful findings.
• You will learn to debrief this findings at both a technical and executive level.
• Perform SAST and DAST on enterprise, SaaS, and custom in-house applications.
• Experience in using scanners and knowledge of validation and elimination of false positives.
• A strong understanding of OWASP in Web, API, Mobile, and AI/LLM is necessary, but you will be asked to go beyond.

Why Us

• A leadership team that values substance, quality, and disciplined execution
• Collaboration with a highly skilled team of security professionals who are passionate about technical excellence and raising the bar
• Competitive compensation and growth opportunity
• Paid education and professional development reimbursement to support continued learning, certifications and technical growth
• Flexible work environment that empowers employees to do their best work
• Paid volunteer day each year to give back to your community
• Paid Birthday day off
• Paid U.S. public holidays

Fully remote within Texas or Florida

At-Will Employment This position is at-will, and this job posting does not constitute an employment contract or guarantee of continued employment.