Remote Penetration Tester — Web & App Security

Packetlabs Ltd.; United States; Remote; USD 120,000 - 180,000; Full time

Job summary

Packetlabs is seeking an experienced developer/application security tester to join our remote team focused on high‑quality penetration testing across web, mobile, and API surfaces. You’ll review source code, reverse engineer apps, and chain flaws to broader infrastructure while delivering actionable remediation reports.

Strong knowledge of C/C#, Python, Java, JavaScript, SQL, and AngularJS is required, along with familiarity with XML/JSON/SOAP/REST/AJAX.

Qualifications

• Solid working knowledge of programming languages including C, C#, Python, Objective-C, Java, JavaScript, SQL and AngularJS.
• Familiarity with XML, JSON, SOAP, REST, and AJAX.
• Understanding of AI/LLM weaknesses in applications.
• Extensive experience with an attack proxy (Burp Suite).
• OSCP or Burp is mandatory for our organization.

Responsibilities

• Penetration testing of web applications, mobile applications, thick clients, and APIs.
• Source code review and whitebox testing to prove impact of flaws.
• Reverse engineering of mobile and thick client applications.
• Chain application flaws to cloud and on-prem AD infrastructure where applicable.
• Develop detailed reports on findings and remediations for impactful findings.
• Learn to debrief findings at technical and executive levels.
• Perform SAST and DAST on enterprise, SaaS, and in-house applications.
• Experience using scanners and knowledge of validation and elimination of false positives.
• Strong understanding of OWASP across Web, API, Mobile, and AI/LLM domains.

Skills

Programming languages: C

C#

Python

Objective-C

Java

JavaScript

SQL

AngularJS

Penetration testing

AI/LLM weaknesses

Education

Post-secondary degree

Tools

Burp Suite

Job description

Packetlabs is seeking an experienced developer/application security tester to join our remote team focused on high‑quality penetration testing across web, mobile, and API surfaces. You’ll review source code, reverse engineer apps, and chain flaws to broader infrastructure while delivering actionable remediation reports.

Strong knowledge of C/C#, Python, Java, JavaScript, SQL, and AngularJS is required, along with familiarity with XML/JSON/SOAP/REST/AJAX.