Penetration Tester - Web, API & External Security

align; United States; Remote; USD 85,000 - 140,000; Full time

Benefits offered by this job

Healthcare

Dental

Vision

Employer Paid Life Insurance

Disability Insurance

EAP

Pet Insurance

401(k) Plan with Employer Matching

Competitive Bonus Structure

Tech Allowance

Certification Reimbursement

Career Coaching

Generous Paid Time Off

Paid Office Closure December 25-Januar

Vacation Bonus

Summer Hours

Job summary

Pathfynder by A-LIGN seeks an experienced Penetration Tester to execute offensive security engagements across external networks, web apps, and APIs. You will identify, validate, and manually exploit vulnerabilities, craft remediation guidance, and deliver defensible client reports.

You will collaborate with the team to refine tools and methodologies while staying current on new vulnerabilities and trends in offensive security.

Qualifications

• 2–5 years of hands-on penetration testing in external, web, API, or mobile testing.
• Experience independently executing engagements and delivering client deliverables.
• Knowledge of established pentesting methodologies and evidence collection practices.
• Experience identifying and manually validating exploitable vulnerabilities, not just automated scanning.
• Experience communicating findings, risk, and remediation guidance clearly to clients and internal stakeholders.

Responsibilities

• Execute external network, web app, and API pentesting engagements per scope and rules.
• Identify, validate, and manually exploit vulnerabilities using various approaches.
• Evaluate attack paths and assess business/technical impact of findings.
• Compile clear client reports with findings, risk, evidence, and remediation guidance.
• Communicate with clients during engagements, including findings walkthroughs and Q&A.
• Execute projects with minimal oversight, maintaining quality and professionalism.
• Collaborate to evaluate tools and improve testing methodologies and reporting standards.
• Share knowledge and guidance with junior team members and clients when appropriate.
• Maintain knowledge of emerging vulnerabilities and industry trends.

Skills

Nmap

SQLmap

Burp Suite

Postman

Nuclei

Wireshark

Nessus

Caido

Python

Bash

JavaScript

PowerShell

SQL

Education

Master's degree in cybersecurity

Bachelor's degree in management information systems

Bachelor's degree in computer science

Tools

Nmap

SQLmap

Burp Suite

Postman

Nuclei

Wireshark

Nessus

Caido

Job description

Pathfynder by A-LIGN seeks an experienced Penetration Tester to execute offensive security engagements across external networks, web apps, and APIs. You will identify, validate, and manually exploit vulnerabilities, craft remediation guidance, and deliver defensible client reports.

You will collaborate with the team to refine tools and methodologies while staying current on new vulnerabilities and trends in offensive security.