Remote Penetration Tester – Web & API Security

A-LIGN; United States; Remote; USD 110,000 - 170,000; Full time

Benefits offered by this job

Healthcare benefits

401(k) with matching

Certification reimbursement

Vacation / paid time off

Bonus structure

Job summary

A-LIGN's Penetration Tester role focuses on executing offensive security engagements across external networks, web applications, and APIs. You will identify, validate, and manually exploit vulnerabilities, assess attack paths, and document findings with remediation guidance for clients.

This full-time role reports to the Director, Web Application & External Offensive Operations and requires 2–5 years of hands-on testing experience, with certifications such as OSCP or OSWE preferred.

Qualifications

• Master’s or Bachelor’s degree in cybersecurity, MIS, CS, or relevant discipline.
• 2-5 years of hands-on penetration testing experience in at least one area: external, web app, API, or mobile tests.
• Experience independently executing penetration testing engagements and producing high-quality client deliverables.
• Knowledge of established penetration testing methodologies and disciplined evidence collection practices.
• Experience identifying and manually validating exploitable vulnerabilities rather than relying solely on automated scanning.
• Experience communicating technical findings, risk, and remediation guidance clearly to clients and internal stakeholders.
• Preferred OSCP, eWPT, eWPTX, OSWA, or OSWE certification.

Responsibilities

• Execute external network, web app, and API penetration testing engagements in accordance with defined scopes, methodologies, and rules of engagement.
• Identify, validate, and manually exploit vulnerabilities using public exploits or internal techniques.
• Evaluate attack paths and determine business and technical impact of identified vulnerabilities.
• Write clear, accurate client reports detailing findings, risk, evidence, and remediation guidance.
• Communicate with clients throughout engagements, including technical discussions and walkthroughs.
• Execute assigned projects with minimal oversight while maintaining quality and professionalism.
• Collaborate with team members to evaluate tools and improve testing methodologies and reporting standards.
• Share knowledge with less-experienced team members and clients.

Skills

Nmap

Burp Suite

SQLmap

Postman

Nuclei

Wireshark

Nessus

Caido

Education

Master’s or Bachelor’s degree in cybersecurity, MIS, CS, or relevant discipline

Tools

Python

Bash

PowerShell

JavaScript

SQL

Job description

A-LIGN's Penetration Tester role focuses on executing offensive security engagements across external networks, web applications, and APIs. You will identify, validate, and manually exploit vulnerabilities, assess attack paths, and document findings with remediation guidance for clients.

This full-time role reports to the Director, Web Application & External Offensive Operations and requires 2–5 years of hands-on testing experience, with certifications such as OSCP or OSWE preferred.