Senior Penetration Tester: Web, Mobile & Cloud Security

Saic; Texas; Hybrid; USD 120,000 - 160,000; Full time

Job summary

Science Applications International Corporation (SAIC) seeks a Penetration Tester for our offensive security practice supporting a major state & local government customer. You will perform web, mobile, and network testing, contribute to enterprise cyber architecture, and deliver actionable remediation guidance to clients.

Role includes engaging with developers, CISOs, and senior leadership, and growing mobile capabilities over time while aligning with NICE framework and CJIS requirements.

Qualifications

• Advanced technical knowledge in cybersecurity and digital forensics.
• Strong working knowledge of the OWASP WSTG and OWASP Top 10 and how to identify and exploit vulnerabilities.
• Proficiency with standard web app testing tools (e.g., Burp Suite Pro, FFUF, SQLMap, Nuclei).
• Familiarity with mobile app testing concepts and tooling (Frida, Objection, MobSF, ADB).
• Proven red-teaming, ethical hacking and cloud security architecture experience.
• Experience writing professional penetration test reports for clients.

Responsibilities

• Deliver high-quality penetration tests across client environments using black box, white box, web app or mobile methodologies per NIST standards.
• Independently manage engagements from scoping through reporting with focus on quality.
• Produce clear, well-structured reports communicating findings, risk, and remediation to technical and executive stakeholders.

Skills

Penetration testing

Cybersecurity

Red-teaming

Cloud security

Digital forensics

Reporting

Education

Bachelor's degree + years

Master's degree + years

PhD/JD + years

Tools

Burp Suite Pro

FFUF

SQLMap

Nuclei

Frida

Objection

MobSF

ADB

Job description

Science Applications International Corporation (SAIC) seeks a Penetration Tester for our offensive security practice supporting a major state & local government customer. You will perform web, mobile, and network testing, contribute to enterprise cyber architecture, and deliver actionable remediation guidance to clients.

Role includes engaging with developers, CISOs, and senior leadership, and growing mobile capabilities over time while aligning with NICE framework and CJIS requirements.