Senior Penetration Tester

Ladders; United States; Remote; USD 143,000 - 183,000; Full time

Benefits offered by this job

Remote work option

Medical, dental, vision coverage

401(k) matching

Job summary

Ladders is seeking a Senior Penetration Tester for a remote role focused on uncovering vulnerabilities across core systems, web apps, APIs, cloud environments, and AI-enabled workflows. You will translate findings into priorities and help strengthen testing coverage with smarter tooling and secure code reviews.

Join a team shaping security in a modern technology organization, with collaboration across engineering to improve overall risk posture while maintaining flexible remote work options.

Qualifications

• 5+ years in application security or related field.
• Hands-on pentesting and code review for web apps, APIs, and AWS.
• Interest in AI-assisted security testing and AI attack surfaces.

Responsibilities

• Conduct manual penetration tests on core systems and AI apps.
• Develop AI-assisted tools to expand testing coverage.
• Triage findings from SAST tools and reduce false positives.
• Perform secure code reviews across web apps, APIs and AWS environments.
• Create security tools and services within the app stack.
• Support AI-generated code security reviews before production.
• Communicate risk and prioritization to engineering teams.

Skills

5+ years in app security

Penetration testing

Code review

AI security testing

AWS security

Programming (Ruby, Python, TS, Go)

Effective communication

Tools

SAST tooling

Job description

For our client, we are seeking a Senior Penetration Tester to join the team of a leader in the Finance & Insurance space.

This role will focus on uncovering vulnerabilities across core systems, web applications, APIs, cloud environments, and AI-enabled workflows.

You will partner closely with engineering teams to translate security findings into clear priorities, while also helping strengthen testing coverage through smarter tooling and secure code review practices.

The position offers the opportunity to influence both offensive security execution and the broader security posture of a modern technology organization.

Location: Remote

Compensation: $143,000 – $183,000 annually

Responsibilities

• Conduct manual penetration tests on core systems and AI applications
• Develop AI-assisted tools to improve penetration testing coverage
• Triage and address findings from SAST tools, refining rules to reduce false positives
• Perform secure code reviews across web applications, APIs, and AWS environments
• Create security tools and services within the application stack
• Support security reviews for AI-generated code before production deployment
• Communicate risks effectively to engineering teams for prioritization

Qualifications

• 5+ years in application security, offensive security, or product security
• Hands‑on experience with pentesting and code review for web applications, APIs, and AWS
• Curiosity and a hacker mentality to explore system vulnerabilities
• Interest in leveraging AI for security testing and workflow improvements
• Understanding of AI/LLM attack surfaces and vulnerabilities in AI-generated code
• Proficiency in modern programming languages like Ruby, Python, TypeScript, or Go
• Strong communication skills to convey risk and priorities to engineers

Benefits

• Flexible work environment with options for remote or hybrid work
• Comprehensive medical, dental, and vision coverage
• Flexible time‑off policy and paid parental leave
• 401k matching for US employees
• Wellness reimbursement and volunteering days
• Annual professional development budget and charitable donation matching

Our client is an equal opportunity employer.