Vulnerability and Penetration Testing Engineer

Tangier Partners; United States; On-site; USD 120,000 - 180,000; Full time

Job summary

Tangier Partners is seeking Vulnerability and Penetration Testing Engineers to join our established security team. You will perform web application penetration tests and vulnerability assessments across varied engagements, with opportunities to deepen expertise in AI, cloud, or mobile security.

In this role, you will identify and validate vulnerabilities, communicate risk to technical and nontechnical stakeholders, collaborate with engineering teams to remediate findings, and contribute to

Qualifications

• Minimum strong web application testing experience.
• Experience in AI, cloud, or mobile testing is a plus.
• GIAC GPEN, GWAPT or GAIPT certification is required.

Responsibilities

• Run web application penetration tests and vulnerability assessments from scoping through reporting
• Identify, exploit and validate vulnerabilities, then clearly communicate risk and remediation to stakeholders
• Extend testing into AI, cloud or mobile environments based on your specialization
• Collaborate with engineering and security teams to remediate findings and strengthen security posture
• Keep up with emerging attack techniques and contribute to testing methodology

Skills

Web app testing

Security testing

Education

GIAC GPEN/GWAPT/GAIPT

Job description

Vulnerability and Penetration Testing Engineers to join an established security team. This is a chance to work on varied, challenging engagements alongside experienced testers, with room to deepen your expertise in AI, cloud, or mobile security.

What you'll do

• Run web application penetration tests and vulnerability assessments from scoping through reporting
• Identify, exploit and validate vulnerabilities, then clearly communicate risk and remediation to technical and nontechnical stakeholders
• Extend testing into AI, cloud or mobile environments based on your specialism
• Work with engineering and security teams to help fix findings and strengthen security posture
• Keep up with emerging attack techniques and contribute to the team's testing methodology

What we're looking for

• Strong web application testing experience
• Additional testing experience in at least one of AI, cloud or mobile
• Background in an enterprise environment (ideal)
• A current GIAC certification: GPEN, GWAPT or GAIPT (required)