Remote Senior Web App Penetration Tester

SixGen, Inc.; United States; Remote; USD 120,000 - 160,000; Full time

Benefits offered by this job

Health insurance

Disability insurance

Life/AD&D insurance

401K with employer contribution

Remote-friendly policies

Flexible PTO / holidays

Job summary

SIXGEN is seeking a Senior Web Application Penetration Tester to join our cyber operations team. You will lead in-depth assessments of web apps, APIs, mobile components, and supporting infrastructure, using manual testing, custom tooling, and advanced exploitation techniques to uncover meaningful security findings.

This role emphasizes hands-on testing beyond automated scans, collaboration with clients, and delivering detailed remediation guidance.

Qualifications

• 5+ years of experience in web application penetration testing or offensive cybersecurity.
• Demonstrated experience conducting manual web application security assessments.
• Knowledge of modern web vulnerabilities, attack methodologies, and exploitation techniques.
• Experience with network mapping, vulnerability scanning, and testing methodologies.
• Familiarity with best practices and standards such as NIST 800-series.

Responsibilities

• Conduct penetration testing of web applications, APIs, mobile apps, databases, and client-side tech.
• Develop and use custom tools, scripts, and payloads to support testing.
• Identify, validate, and assess vulnerabilities across complex environments.
• Collaborate with clients to define scope, review findings, and recommend remediation.

Skills

Web application pentesting

Manual testing

Vulnerability research

Exploitation techniques

Communication skills

Tools

Custom tooling

Network mapping

Job description

SIXGEN is seeking a Senior Web Application Penetration Tester to join our cyber operations team. You will lead in-depth assessments of web apps, APIs, mobile components, and supporting infrastructure, using manual testing, custom tooling, and advanced exploitation techniques to uncover meaningful security findings.

This role emphasizes hands-on testing beyond automated scans, collaboration with clients, and delivering detailed remediation guidance.