Penetration Tester, Web/Mobile Apps and Cloud Services

TP-Link Systems Inc.; Irvine (CA); On-site; USD 80,000 - 132,000; Full time

Benefits offered by this job

Medical, dental, and vision insurance

401k with employer contributions

Vacation and holidays

Performance reviews and raises

Wellness benefits and gym membership

Team-building events

Job summary

TP-Link Systems Inc. in Irvine seeks a Penetration Tester to support cloud services and security for web and mobile apps. You will work with senior engineers on testing, threat modeling, and security assessments to strengthen cloud security.

Ideal candidates have 1–3 years in security engineering, strong OWASP Top 10 knowledge, and hands-on use of Burp Suite, OWASP ZAP, Nmap, Kali, Nessus or Metasploit. You will assist incident response, risk assessment, and CI/CD security initiatives within a

Qualifications

• 1–3 years as Security Engineer (Cloud & Web) or similar role.
• Strong knowledge of web/app security and cloud security concepts.
• Experience with security tools listed in qualifications.
• Proficient in at least one programming language (Python/JS/Bash/PowerShell).
• Familiar with AWS/Azure/GCP and their security controls.
• Certs (CEH/OSWP) are highly preferred; CVEs are a plus.

Responsibilities

• Penetration testing on cloud services, web apps, and APIs with remediation reports.
• Threat modeling and security assessments for cloud components.
• Incident response support and vulnerability management.
• Analyze cloud security configurations and fix misconfigurations.
• Develop pen-testing tools and automate testing for cloud environments.
• Contribute to CI/CD security processes across the lifecycle.
• Interpret security standards and regulatory requirements.

Skills

Web security

Cloud security

API security

OWASP Top 10

Programming (Python/JS/Bash/PowerShell

Security tools usage

Education

Bachelor's degree in CS/Info Security or related

Tools

Burp Suite

OWASP ZAP

Nmap

Kali Linux

Nessus

Metasploit

Job description

About Us

Headquartered in the United States, TP-Link Systems Inc. is a global provider of reliable networking devices and smart home products, consistently ranked as the world's top provider of Wi-Fi devices. The company is committed to delivering innovative products that enhance people's lives through faster, more reliable connectivity. With a commitment to excellence, TP-Link Systems serves customers in over 170 countries and continues to grow its global footprint. We believe technology changes the world for the better! At TP-Link Systems Inc, we are committed to crafting dependable, high-performance products to connect users worldwide with the wonders of technology. Embracing professionalism, innovation, excellence, and simplicity, we aim to assist our clients in achieving remarkable global performance and enable consumers to enjoy a seamless, effortless lifestyle.

Overview

TP-Link Systems Inc. is seeking a skilled and proactive Penetration Tester, Web/Mobile Apps and Cloud Services to support our cloud service projects under the guidance of senior team members. This role is designed for candidates with a foundational technical background in cybersecurity, particularly in cloud environments. Under the mentorship of senior engineers, the successful candidate will be involved in a range of security activities for specific cloud service components, including penetration testing, threat modeling and security assessment for defined modules, contributing to investigation, risk assessment and verification for incident response. The ideal candidate is eager to learn, capable of working within defined boundaries, and driven to enhance the security of TP-Link's cloud services while developing deeper expertise in cloud security practices.

Key Responsibilities

• Penetration Testing: Perform penetration testing on cloud services, web applications, and APIs to identify vulnerabilities. Provide remediation recommendations and write detailed penetration test reports
• Threat Modelling and security assessment: Perform threat modeling to identify and evaluate potential risks for specific cloud components and web applications
• Incident Response and Vulnerability Management: Support cloud and web application incident response, including investigation, containment, remediation, and post-incident analysis. Coordinate with cross-functional teams to ensure effective resolution
• Cloud security configuration: Analyze cloud security configurations and identify misconfigurations that could lead to vulnerabilities
• Develop security tools: Assist in developing various pen-testing tools, automated testing platforms, and scripts to enhance testing efficiency and accuracy for cloud environments
• CI/CD Security Integration: Participate in the development and improvement of the company's CI/CD security processes, ensuring security considerations are integrated throughout the development lifecycle
• Interpret cloud security standards and regulatory requirements, supporting implementation of security requirements

Qualifications

• Bachelor's degree in Computer Science, Information Security, or a related field (or equivalent work experience)
• Proven 1-3 years experience as a Security Engineer (Cloud & Web) or in a similar role
• Strong knowledge of web application security, cloud security concepts, API security, and common vulnerabilities (OWASP Top 10)
• Experience with security tools such as Burp Suite, OWASP ZAP, Nmap, Kali, Nessus, Metasploit, etc
• Capability to optimize penetration testing tools and automation strategies for cloud environments
• Ability to analyze SAST results and identify false positives
• Proficient in at least one programming language (e.g., Python, JavaScript, Bash, or PowerShell)
• Familiarity with major cloud platforms (AWS, Azure, GCP) and their security controls
• Relevant security certifications (e.g., CEH, OSWP, etc.) are highly preferred
• Published CVEs are highly preferred

Soft Skills

• Strong communication and interpersonal skills. Ability to work independently as well as collaborate with cross-functional teams
• Strong willingness to learn, able to work under guidance and take constructive feedback
• Team-oriented mindset, with the ability to follow technical direction and contribute constructively to group tasks
• Attention to detail and systematic approach to problem solving

Benefits

Salary range: $80,000-$132,000

• Fully paid medical, dental, and vision insurance (partial premium coverage for dependents)
• Employer quarterly contributions to 401k funds
• 15 days accrued vacation
• 11 paid holidays
• Bi-annual reviews, and annual pay increases
• Health and wellness benefits, including free gym membership
• Quarterly team-building event

At TP-Link Systems Inc., we are continually searching for ambitious individuals who are passionate about their work. We believe that diversity fuels innovation, collaboration, and drives our entrepreneurial spirit. As a global company, we highly value diverse perspectives and are committed to cultivating an environment where all voices are heard, respected, and valued. We are dedicated to providing equal employment opportunities to all employees and applicants, and we prohibit discrimination and harassment of any kind based on race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws. Beyond compliance, we strive to create a supportive and growth-oriented workplace for everyone. If you share our passion and connection to this mission, we welcome you to apply and join us in building a vibrant and inclusive team at TP-Link Systems Inc.

we are unable to offer visa sponsorships at this time.