Senior Penetration Tester - AI-Driven OffSec Lead (Remote)

Bright Defense, LLC.; United States; Remote; USD 140,000 - 190,000; Full time

Benefits offered by this job

Remote-first

Certification reimbursement

AI tooling access

Lab time and AI tooling

Job summary

Bright Defense is seeking a Senior Penetration Tester to own engagements from scoping through retesting for web, API, and mobile security. You will conduct manual and automated testing, mentor junior testers, and set the quality bar for the team.

You will use AI-assisted testing workflows and work remotely with a senior-level backlog of client engagements across defense, healthcare, fintech, and SaaS sectors.

Qualifications

• 5+ years of hands-on offensive security testing of web apps and APIs.
• OSCP or equivalent practical certification is required.
• Demonstrated use of AI tooling as part of testing workflow.
• Strong knowledge of OWASP Top 10 and modern authn/authz flaws.

Responsibilities

• Plan, execute, and manage penetration tests for customers (web, API, mobile).
• Conduct manual and automated testing to identify security flaws and misconfigurations.
• Scope engagements, set rules of engagement, timelines, and success criteria with customers.
• Perform retesting and validate fixes hold; write detailed reports.

Skills

5+ years experience

AI tooling usage

Mentoring teammates

Strong communication

Education

Bachelor’s degree or equivalent

Tools

Burp Suite Pro

Metasploit

Nmap

ffuf

Python scripting

Job description

Bright Defense is seeking a Senior Penetration Tester to own engagements from scoping through retesting for web, API, and mobile security. You will conduct manual and automated testing, mentor junior testers, and set the quality bar for the team.

You will use AI-assisted testing workflows and work remotely with a senior-level backlog of client engagements across defense, healthcare, fintech, and SaaS sectors.