Senior Penetration Tester - Remote/Hybrid Security Expert

NinjaOne; California; Hybrid; USD 130,000 - 165,000; Full time

Benefits offered by this job

Medical, dental, vision insurance

401(k) plan

Unlimited PTO

Job summary

NinjaOne is seeking a seasoned Penetration Tester to strengthen security across our platform, cloud environments, and applications. You will conduct controlled testing, validate vulnerabilities, and work with researchers worldwide to improve security posture.

A strong background in pen testing, CVSS, and scripting is essential. The role involves collaboration with engineering, reporting to leadership, and contributing to a broad bug bounty program.

Qualifications

• Bachelor's degree in Information Technology, Computer Science, or a related field.
• 8+ years of hands-on penetration testing experience, within a broader 5+ years in cybersecurity-related roles.
• Strong understanding of security protocols, cryptography, authentication/authorization, and modern attack techniques.
• Security certifications such as OSCP (highly desired) and/or Security+, CISSP, or CISM are a plus.
• Proficiency with penetration testing tools such as Burp Suite, Caido, and related frameworks.
• Experience validating and scoring vulnerabilities (CVSS) and communicating findings to both technical and non-technical audiences; bug bounty triage or program experience is a strong plus.
• Ability to develop custom testing tools or scripts (Java, Kotlin, C++, Python, or Go).
• Knowledge of security frameworks and methodologies (OWASP, NIST, BSIMM), threat modeling (STRIDE, DREAD), and system hardening standards (CIS, CSA).
• Solid understanding of Linux and Windows operating systems, enterprise architecture, and TCP/IP and UDP networking fundamentals.
• Experience testing or exploiting cloud-native applications; understanding cloud security architecture is a plus.

Responsibilities

• Perform controlled penetration testing of NinjaOne applications, cloud environments, and infrastructure, demonstrating exploitability and documenting risks and remediation steps
• Perform security testing of new and modified API endpoints and features as part of each release cycle, prioritizing coverage against release timelines
• Collaborate with Engineering to validate vulnerabilities, communicate impact, and support secure design and remediation efforts
• Develop custom tools or scripts to support penetration testing, automation, and exploit development
• Perform first-pass triage and validation of bug bounty submissions: reproduce reported issues, assess severity and impact (CVSS), identify duplicates, and route confirmed findings to the appropriate teams
• Communicate directly with external security researchers in clear, professional written English throughout the report lifecycle
• Stay current on emerging threats, TTPs, and cybersecurity trends, applying them to evaluate NinjaOne's exposure and guide security initiatives
• Create clear, comprehensive reports and presentations for both technical and executive stakeholders
• Promote security awareness across the organization, contributing to policies, best practices, and ongoing security education
• Other duties as needed

Skills

Penetration testing

Security concepts

Cryptography

Authentication/authorization

Attack techniques

Custom testing tools

Written & verbal communication

Education

Bachelor's degree in IT / CS or related field

Tools

Burp Suite

Caido

Job description

NinjaOne is seeking a seasoned Penetration Tester to strengthen security across our platform, cloud environments, and applications. You will conduct controlled testing, validate vulnerabilities, and work with researchers worldwide to improve security posture.

A strong background in pen testing, CVSS, and scripting is essential. The role involves collaboration with engineering, reporting to leadership, and contributing to a broad bug bounty program.