Penetration Tester – Web, Mobile & Cloud Security

Saic; Town of Texas (WI); On-site; USD 120,000 - 160,000; Full time

Job summary

Science Applications International Corporation (SAIC) is seeking a Penetration Tester to join our offensive security practice supporting a major state & local government customer. You will perform web and network pentesting, contribute to mobile testing, and guide enterprise security architecture decisions.

You will present findings to both developers and CISOs, lead engagement planning, and help advance internal tooling and methodologies while staying current on industry developments.

Qualifications

• Bachelor's degree and 9+ years of related experience; advanced degrees may substitute
• US Citizenship with ability to pass CJIS background investigation and maintain clearance

Responsibilities

• Deliver high-quality penetration tests across client environments using black/white box, web app, or mobile methods per NIST standards
• Independently manage engagements from scoping to reporting with focus on quality
• Produce clear technical reports communicating findings, risks, and remediation guidance to technical and executive stakeholders
• Support mobile app security assessments (iOS/Android) using OWASP MASVS/MSTG and grow mobile capabilities
• Present findings to clients clearly, translating complex technical concepts for business audiences
• Share knowledge and contribute to internal tooling and methodology improvements
• Stay current on vulnerabilities and attack techniques; apply them to client engagements

Skills

OWASP Top 10

Burp Suite Pro

Mobile testing

Red team

Cloud security

Malware reverse engineering

Vulnerability tools

Education

Bachelor's degree

Tools

Frida

Objection

MobSF

ADB

Burp Suite Pro

FFUF

SQLMap

Nuclei

Job description

Science Applications International Corporation (SAIC) is seeking a Penetration Tester to join our offensive security practice supporting a major state & local government customer. You will perform web and network pentesting, contribute to mobile testing, and guide enterprise security architecture decisions.

You will present findings to both developers and CISOs, lead engagement planning, and help advance internal tooling and methodologies while staying current on industry developments.