Senior Penetration Tester — Cloud & Web Security

HireHi; United States; Remote; USD 120,000 - 160,000; Full time

Benefits offered by this job

Private health insurance

Performance-based bonus

Professional training portal access

Corporate events and amenities

Certification compensation (AWS, PMP,

Job summary

HireHi is seeking a seasoned cybersecurity professional to lead penetration testing across web apps, APIs, networks, and cloud environments. You will plan, execute, document, and present findings to system owners and management, and support remediation efforts.

The role requires 5+ years in cybersecurity with 3+ years hands-on testing, OWASP-aligned assessments, and strong tooling experience (Burp Suite Pro, Nmap, Metasploit).

Qualifications

• 5+ years of cybersecurity experience with 3+ years hands-on pen testing.
• Experience testing web apps and APIs per OWASP Top 10, WSTG, ASVS.
• Experience testing internal/external infrastructure including AD.
• Proficient with Burp Suite Pro, Nmap, Metasploit, BloodHound, Impacket.
• Hands-on certification: OSCP/OSWE/OSEP/CRTO/eWPTX/GPEN/GWAPT.

Responsibilities

• Plan and perform penetration tests of web applications, APIs, internal and external networks, Active Directory, and cloud environments
• Conduct manual testing beyond automated scanning, including exploitation and privilege escalation within the agreed rules of engagement
• Validate findings, assess business risk, and produce clear technical and executive reports
• Present results to system owners and management, and support remediation and retesting
• Contribute to red teaming or purple teaming exercises with SOC and detection teams
• Maintain testing methodologies, tools, and templates

Skills

Penetration testing

Web apps & APIs

Infrastructure testing

English proficiency

Security tooling

Education

OSCP/OSWE/OSEP/CRTO/eWPTX/GPEN/GWAPT

Tools

Burp Suite Pro

Nmap

Metasploit

BloodHound

Impacket

Job description

HireHi is seeking a seasoned cybersecurity professional to lead penetration testing across web apps, APIs, networks, and cloud environments. You will plan, execute, document, and present findings to system owners and management, and support remediation efforts.

The role requires 5+ years in cybersecurity with 3+ years hands-on testing, OWASP-aligned assessments, and strong tooling experience (Burp Suite Pro, Nmap, Metasploit).