Senior Vulnerability Assessment & Penetration Tester

SteelToad; San Diego (CA); On-site; USD 120,000 - 170,000; Full time

Benefits offered by this job

Medical Insurance

401(k) with company match

Paid holidays

Paid Time Off 120 hours/year

Professional Development Program

Job summary

SteelToad is seeking a Vulnerability Assessment Analyst and Penetration Tester to deliver continuous cyber assessments and drive automation. You will perform manual system and application testing, automate repetitive tasks, and mentor others to enhance penetration testing capabilities.

Ideal candidates have 5+ years of hands-on pentesting, OS security expertise, and proficiency with Burp Suite, Metasploit, and Kali Linux. Travel is 10–15% within the US and 5–10% international.

Qualifications

• Five years of hands-on penetration testing experience with OS, web apps, and networks.
• Administrator-level knowledge of Windows and Linux servers.
• Experience with operating system security and assessment methods.
• Proficient with Burp Suite, Metasploit, Cobalt Strike, Kali Linux, Nessus, PowerShell Empire.
• Knowledge of network defense technologies (IDS/IPS, firewalls, EDR).
• Strong written and verbal communication; able to explain complex topics to non-tech audiences.
• Onboarding certifications: OSCP or OSWA; plan to obtain GXPN or OSEP within 9 months.

Responsibilities

• Perform manual assessments of systems, services, and software.
• Execute application and hardware penetration testing; automate repetitive tasks.
• Mentor and lead engineers to deliver complex tests and assessments.
• Drive automation, tooling, and efficiency to advance penetration testing capabilities.
• Create threat mitigation plans based on findings and findings reporting.

Skills

Penetration testing

Windows/Linux admin

OS security

Security tooling

Network defense knowledge

Communication skills

Tools

Burp Suite

Metasploit

Cobalt Strike

Kali Linux

Nessus

PowerShell Empire

Job description

SteelToad is seeking a Vulnerability Assessment Analyst and Penetration Tester to deliver continuous cyber assessments and drive automation. You will perform manual system and application testing, automate repetitive tasks, and mentor others to enhance penetration testing capabilities.

Ideal candidates have 5+ years of hands-on pentesting, OS security expertise, and proficiency with Burp Suite, Metasploit, and Kali Linux. Travel is 10–15% within the US and 5–10% international.