Remote Penetration Tester & Offensive Security Consultant

Hyperproof; United States; On-site; USD 120,000 - 190,000; Full time

Benefits offered by this job

Remote work in the United States

Inclusive culture

Job summary

Bishop Fox is seeking talented, experienced professional hackers to help secure complex software and technologies. You’ll work with US and international teams supporting clients across multiple industries.

Responsibilities include testing web apps, networks, and reversing software on diverse projects, from short engagements to extended programs. Strong reporting and remediation guidance are essential, with a passion for information security.

Qualifications

• 4+ years of planning, conducting, and managing web application penetration tests.
• 5+ years of application security experience.
• Strong understanding of OWASP and common vulnerabilities.
• Ability to develop exploits for diverse targets.
• Experience with Python, Ruby, PowerShell, Java, JavaScript.
• Experience reviewing Golang source code is a bonus.
• Proficient in Linux, Windows, MacOS.
• Experience with AWS cloud environments and security.
• Clear, actionable technical reporting and remediation guidance.

Responsibilities

• Test web applications, test networks, and reverse software.
• Work on short-term engagements and extended programs for established clients.
• Solve challenging technical problems and build creative security solutions.
• Provide expert opinion to help clients navigate security decisions.

Skills

Penetration testing

OWASP

Vulnerability assessment

Exploit development

Scripting languages

AWS security

OSCP / CS degree

Reporting

Linux/Windows

Security fundamentals

Education

BS in Computer Science or related field

OSCP certification

Job description

Bishop Fox is seeking talented, experienced professional hackers to help secure complex software and technologies. You’ll work with US and international teams supporting clients across multiple industries.

Responsibilities include testing web apps, networks, and reversing software on diverse projects, from short engagements to extended programs. Strong reporting and remediation guidance are essential, with a passion for information security.