Senior Penetration Tester - Remote/Hybrid Security Expert

Jobvite, Inc.; United States; Hybrid; USD 130,000 - 165,000; Full time

Benefits offered by this job

Medical, dental, vision

401(k) retirement plan

Unlimited PTO

Growth opportunities

Job summary

NinjaOne is seeking a senior penetration tester to strengthen our security program across apps and environments. You will perform controlled testing of web, cloud, and API surfaces and document risks for remediation.

You will collaborate with Engineering, triage bug bounty submissions, and develop custom tools. The role requires strong English communication and up-to-date threat knowledge.

We offer hybrid remote work in the United States, comprehensive benefits, and opportunities for growth.

Qualifications

• Bachelor's degree in IT, CS, or related field.
• 8+ years in hands-on pen testing plus cybersecurity experience.
• Proficient in Burp Suite and related tooling.
• Experience with CVSS scoring and risk communication.

Responsibilities

• Perform controlled penetration testing of NinjaOne applications, cloud environments, and infrastructure, documenting risks and remediation steps.
• Test security of new API endpoints and features per release cycle, prioritizing coverage against timelines.
• Collaborate with Engineering to validate vulnerabilities, communicate impact, and support secure remediation.
• Develop custom tools or scripts to support penetration testing, automation, and exploit development.
• Perform first-pass triage and validation of bug bounty submissions: reproduce issues, assess severity, identify duplicates, route findings.

Skills

Security testing

Threat modeling

Scripting

Documentation

Education

Bachelor's degree in IT/CS or related field

Tools

Burp Suite

Caido

CVSS tooling

Job description

NinjaOne is seeking a senior penetration tester to strengthen our security program across apps and environments. You will perform controlled testing of web, cloud, and API surfaces and document risks for remediation.

You will collaborate with Engineering, triage bug bounty submissions, and develop custom tools. The role requires strong English communication and up-to-date threat knowledge.

We offer hybrid remote work in the United States, comprehensive benefits, and opportunities for growth.