Remote External Penetration Tester – Web Apps & Networks

Xtreme Solutions Corporate; San Bernardino (CA); On-site; USD 120,000 - 170,000; Full time

Job summary

Xtreme Solutions Corporate is seeking an experienced penetration tester to perform blind and intelligent testing against internet-facing assets, including web applications, firewalls, VPN/RDP, and public postings. The role targets data exfiltration with real-world threat intelligence.

Fully remote within the continental United States, with emphasis on risk-based assessments and detailed remediation guidance for 47 County departments.

Qualifications

• 4+ years of hands-on external network / web application penetration testing experience.
• Proficiency with industry-standard tools (Burp Suite, Nmap, Metasploit, or equivalent).
• Strong understanding of OWASP Top 10 and common network attack vectors.
• OSCP, GPEN, GWAPT, or CEH certification (preferred).
• Experience testing government or healthcare-sector environments (preferred).

Responsibilities

• Conduct external network and web application penetration testing and vulnerability assessments per NIST SP 800-115 methodology.
• Attempt to obtain ePHI, PII, financial data, and privileged communications from external sources without causing service disruption.
• Document all findings with risk ratings, evidence, and remediation recommendations for the Assessment report.
• Attempt to avoid detection and evade department response efforts during testing windows, as scoped.

Skills

Penetration testing

Threat intelligence

Tools

Burp Suite

Nmap

Metasploit

Job description

Xtreme Solutions Corporate is seeking an experienced penetration tester to perform blind and intelligent testing against internet-facing assets, including web applications, firewalls, VPN/RDP, and public postings. The role targets data exfiltration with real-world threat intelligence.

Fully remote within the continental United States, with emphasis on risk-based assessments and detailed remediation guidance for 47 County departments.