Remote Penetration Tester for Web, Mobile & API Security

Velero; United States; Remote; USD 165,000 - 220,000; Full time

Job summary

Velero, a cybersecurity and compliance consultancy, seeks a skilled penetration tester in the United States to assess web, mobile, and API security and translate findings into actionable steps for clients.

Join a team that conducts rigorous testing across cloud and on-prem environments, applies industry standards like GDPR, PCI-DSS, and SOC 2, and communicates complex risks clearly to technical and non-technical audiences.

Qualifications

• 3+ years of penetration testing across web apps, mobile apps, APIs, and networks.
• Expertise in internal and external network testing.
• Knowledge of OWASP Top 10 and MITRE ATT&CK.
• Familiarity with Burp Suite, Nmap, Metasploit, Wireshark, Nessus.
• Experience with cloud environments (AWS/Azure/GCP) is a plus.
• Strong written and verbal communication skills.

Responsibilities

• Conduct penetration tests on web applications, mobile applications, and APIs to identify vulnerabilities and potential exploits.
• Perform network penetration testing, including internal and external network assessments, to ensure comprehensive coverage of security weaknesses.
• Implement social engineering techniques such as phishing campaigns to simulate real-world attacks and identify human-related security risks.
• Prepare detailed technical reports and provide actionable recommendations based on the results of penetration tests.
• Collaborate with internal teams and external clients to discuss findings, mitigation strategies, and security best practices.
• Ensure compliance with relevant security standards and regulations, including GDPR, PCI-DSS, SOC 2, and others.
• Stay up to date on emerging threats, vulnerabilities, and security best practices.

Skills

Penetration testing

Network security testing

Security reporting

Communication skills

OWASP Top 10

MITRE ATT&CK

Burp Suite

Nmap

Metasploit

Wireshark

Nessus

Cloud security AWS

Tools

AWS

Azure

GCP

Job description

Velero, a cybersecurity and compliance consultancy, seeks a skilled penetration tester in the United States to assess web, mobile, and API security and translate findings into actionable steps for clients.

Join a team that conducts rigorous testing across cloud and on-prem environments, applies industry standards like GDPR, PCI-DSS, and SOC 2, and communicates complex risks clearly to technical and non-technical audiences.