Remote Penetration Tester - Web & Mobile Security (FL)

Packetlabs Ltd.; United States; Remote; USD 90,000 - 150,000; Full time

Benefits offered by this job

Fully remote (in Florida)

Competitive compensation

Job summary

Packetlabs Ltd. is seeking a skilled application security tester to join our team. You will perform penetration testing of web, mobile, and API surfaces, review source code, and help prove exploit impacts.

This role emphasizes hands-on testing, reporting, and security validation in a dynamic client environment. This position requires 3–5 years of pentest/consulting experience, OSCP/OSWE/BSCP certifications, and a strong OWASP focus.

Qualifications

• Solid working knowledge of programming languages including C, C#, Python, Objective-C, Java, JavaScript, and SQL.
• Familiarity with web services and data formats such as XML, JSON, SOAP, REST, and AJAX.
• Understanding of AI/LLM weaknesses and flaws in applications.
• Extensive experience with an attack proxy such as Burp Suite.
• 3–5 years of experience in penetration testing and consulting.
• Graduate of a post-secondary college or university degree program.
• Professional qualifications OSCP, OSWE or BSCP.

Responsibilities

• Perform penetration testing of web applications, mobile applications, thick clients, and APIs.
• Source code review and whitebox testing to prove impact of flaws.
• Reverse engineering of mobile and thick client applications.
• Chain application flaws to cloud and on-prem AD infrastructure when appropriate.
• Develop detailed reports on findings and remediations for technical and executive audiences.
• Perform SAST and DAST on enterprise, SaaS, and in-house applications.
• Utilize scanners and validate/eliminate false positives.
• Maintain strong OWASP knowledge across Web, API, Mobile, and AI/LLM.

Skills

C

C#

Python

Objective-C

Java

JavaScript

SQL

AngularJS

Education

Post-secondary degree

OSCP

OSWE

BSCP

Tools

Burp Suite

Job description

Packetlabs Ltd. is seeking a skilled application security tester to join our team. You will perform penetration testing of web, mobile, and API surfaces, review source code, and help prove exploit impacts.

This role emphasizes hands-on testing, reporting, and security validation in a dynamic client environment. This position requires 3–5 years of pentest/consulting experience, OSCP/OSWE/BSCP certifications, and a strong OWASP focus.