Remote External Penetration Tester - Web & Network

Xtreme Solutions Inc; San Bernardino (CA); On-site; USD 110,000 - 150,000; Full time

Job summary

Xtreme Solutions Inc. is seeking a highly capable penetration tester to perform blind and intelligent assessments of internet-facing assets, including web applications, firewalls, and remote access services.

The role focuses on extracting sensitive data using real-world threat intelligence while evading detection across 47 County departments. Candidates should have 4+ years of hands-on external testing, strong OWASP knowledge, and proficiency with Burp Suite, Nmap, and Metasploit.

Qualifications

• 4+ years of hands-on external network / web application penetration testing experience.
• Proficiency with industry-standard tools (Burp Suite, Nmap, Metasploit, or equivalent).
• Strong understanding of OWASP Top 10 and common network attack vectors.

Responsibilities

• Conduct external network and web application penetration testing and vulnerability assessments per NIST SP 800-115 methodology.
• Attempt to obtain ePHI, PII, financial data, and privileged communications from external sources without causing service disruption.
• Document all findings with risk ratings, evidence, and remediation recommendations for the Assessment report.
• Attempt to avoid detection and evade department response efforts during testing windows, as scoped.

Skills

Penetration testing

Documentation

Threat modeling

Tools

Burp Suite

Nmap

Metasploit

Job description

Xtreme Solutions Inc. is seeking a highly capable penetration tester to perform blind and intelligent assessments of internet-facing assets, including web applications, firewalls, and remote access services.

The role focuses on extracting sensitive data using real-world threat intelligence while evading detection across 47 County departments. Candidates should have 4+ years of hands-on external testing, strong OWASP knowledge, and proficiency with Burp Suite, Nmap, and Metasploit.