Remote Penetration Tester - Web & API Security Expert

A-LIGN; United States; On-site; USD 90,000 - 150,000; Full time

Benefits offered by this job

Healthcare benefits

Life & disability insurance

Employee Assistance Program

Pet insurance

401(k) with company match

Bonus program

Tech allowance

Certification reimbursement

Career coaching

Paid time off

Office holidays

Job summary

A-LIGN is seeking a Penetration Tester to execute offensive security activities across external networks, web apps, and APIs. You will lead penetration testing engagements, identify and manually exploit vulnerabilities, and document findings with remediation guidance for clients.

In this role, you will communicate complex findings to clients, contribute to tool and process improvements, and stay ahead of evolving security threats in a fast-paced environment.

Qualifications

• Master’s or Bachelor’s degree in cybersecurity or related field.
• 2–5 years of hands-on penetration testing in external, web, API, or mobile tests.
• Experience delivering high-quality client deliverables.
• Knowledge of penetration testing methodologies and evidence collection practices.

Responsibilities

• Execute external network, web app, and API penetration tests per scope.
• Identify, validate, and manually exploit vulnerabilities.
• Evaluate attack paths and assess business/technical impact.
• Write clear client reports with findings, risk, evidence, and remediation guidance.
• Communicate findings with clients during engagements.
• Deliver projects with minimal oversight while upholding quality.
• Collaborate to improve testing tools and reporting standards.
• Share knowledge with junior team members and clients.
• Stay current with vulnerabilities and industry trends.

Skills

Nmap

Burp Suite

SQLmap

Nessus

Wireshark

Caido

Python

PowerShell

JavaScript

Postman

Education

Master’s or Bachelor’s degree in cybersecurity, MIS, CS

Tools

Nmap

SQLmap

Burp Suite

Postman

Nuclei

Wireshark

Nessus

Job description

A-LIGN is seeking a Penetration Tester to execute offensive security activities across external networks, web apps, and APIs. You will lead penetration testing engagements, identify and manually exploit vulnerabilities, and document findings with remediation guidance for clients.

In this role, you will communicate complex findings to clients, contribute to tool and process improvements, and stay ahead of evolving security threats in a fast-paced environment.