{"@context":"https://schema.org","@type":"ItemList","name":"Penetration Tester Job Description and Salary | Cybersecurity Jobs","description":"Explore the role of a Penetration Tester in cybersecurity, salary expectations, required skills, and job opportunities. Find the latest Penetration Tester job openings on top job boards.","itemListElement":[{"@type":"ListItem","position":1,"item":{"@type":"JobPosting","title":"Penetration Tester ","datePosted":"2025-07-15","description":"

Penetration Tester

Join us as Senior Analyst on our Penetration Testing team in México – On-site to do the best work of your career and make a profound social impact.

The ideal candidate possesses firm understanding of attack surfaces in web technologies, networks, and operating systems. Candidates must demonstrate the ability to analyze closed source applications using several off-the-shelf or custom developed tools. Additionally, the ideal candidate will be able to demonstrate organizational skills, work efficiently under minimal supervision, be able to deliver results that meet or exceed organization’s expectations, be a strong team player, and actively participate in a fast-paced and challenging global environment.

What you’ll achieve

Conduct and participate in authorized penetration testing exercises.

Report on and prioritize issues to vendors, security team, and engineering through standard escalation processes.

Communicate new developments, breakthroughs, challenges and lessons learned to team members and leadership.

Collaborate with the development of cybersecurity strategy, policy, standards, and procedures.

Work with management and senior team members on how to integrate information security controls into enterprise environments to comply with established security standards and policies.

Continuously upgrade knowledge, skills & awareness in cybersecurity technologies by way of independent research, training, or any other self -improvement methods e.g., (Reading, HTB, CTF competitions)

Collaborate on additional projects, assignments, and initiatives as required.

Take the first step towards your dream career

Every Dell Technologies team member brings something unique to the table. Here’s what we are looking for with this role:

Minimum of 2 years in Information Security, including at least 1 year of hands-on experience in one or more of the following areas: penetration testing, exploit development, vulnerability research, or fuzzing.
Bachelor’s degree in Computer Science, Computer Engineering, Electrical Engineering, or a related technical field — or equivalent professional experience.
Cybersecurity Certifications:
Possession of at least one of the following relevant certifications:

eLearnSecurity Certified Professional Penetration Tester (eCPPTv2)

Offensive Security Certified Professional (OSCP)

GIAC Penetration Tester (GPEN) or GIAC Web Application Penetration Tester (GWAPT)

Intermediate-level knowledge of penetration testing tools and techniques, cyberattack stages, application security standards, and testing methodologies for web applications, APIs, and network/infrastructure.
Solid understanding of computer networking, operating system internals, and common security threats, vulnerabilities, and risks affecting systems and applications.

Desirable requirements

Experience writing code in modern programming languages (e.g., C, C++, Java, .NET, Python), with knowledge of debugging principles and the ability to develop custom scripts, exploits, and tools.
Strong written and verbal communication skills in English, with a customer-oriented mindset and the ability to produce professional security reports and effectively present findings to technical and non-technical stakeholders.

Who we are

We believe that each of us has the power to make an impact. That’s why we put our team members at the center of everything we do. If you’re looking for an opportunity to grow your career with some of the best minds and most advanced tech in the industry, we’re looking for you.

Dell Technologies is a unique family of businesses that helps individuals and organizations transform how they work, live and play. Join us to build a future that works for everyone because Progress Takes All of Us.

Application closing date: 29 July 2025

Dell Technologies is committed to the principle of equal employment opportunity for all employees and to providing employees with a work environment free of discrimination and harassment. Read the full Equal Employment Opportunity Policy here.

","hiringOrganization":{"@type":"Organization","name":"Dell Technologies","sameAs":"https://www.delltechnologies.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Mexico City, Mexico","addressCountry":"Mexico","addressRegion":"North America"}}}},{"@type":"ListItem","position":2,"item":{"@type":"JobPosting","title":"Penetration Tester","datePosted":"2025-08-05","description":"

Join us in building the future of finance.

Our mission is to democratize finance for all. An estimated $124 trillion of assets will be inherited by younger generations in the next two decades. The largest transfer of wealth in human history. If you’re ready to be at the epicenter of this historic cultural and financial shift, keep reading.

About the team + role

We are building an elite team, applying frontier technologies to the world’s biggest financial problems. We’re looking for bold thinkers. Sharp problem-solvers. Builders who are wired to make an impact. Robinhood isn’t a place for complacency, it’s where ambitious people do the best work of their careers. We’re a high-performing, fast-moving team with ethics at the center of everything we do. Expectations are high, and so are the rewards.

The Penetration Testing team at Robinhood is a core part of our Offensive Security program and a key pillar within Security & Privacy Engineering. We work across the company to identify, understand, and reduce security risk through threat modeling, penetration testing, code reviews, and vulnerability research. Our team goes beyond simply finding issues—we take pride in fixing what we find, contributing to long-term improvements, and proactively helping teams build safer systems from the start.

As a Penetration Tester, you'll be a hands-on contributor to our internal application security testing program. You'll perform manual assessments, research emerging threats, scale the team with automation, and work directly with engineers to design and implement fixes. This is a highly collaborative role that combines technical depth, creativity, and clear communication to protect our customers and our platform.

This role is based in our Menlo Park, CA or Bellevue, WA office(s), with in-person attendance expected at least 3 days per week.

At Robinhood, we believe in the power of in-person work to accelerate progress, spark innovation, and strengthen community. Our office experience is intentional, energizing, and designed to fully support high-performing teams.

What you’ll do

Perform application security assessments, including code reviews (primarily Go and Python), design reviews, and manual penetration testing of web applications, services, and infrastructure.
Conduct threat modeling for high-impact systems and articulate security risk in terms of business logic, fraud potential, and customer impact.
Collaborate on the triage of bug bounty submissions.
Validate critical vulnerabilities surfaced by automated tools and improve detection coverage through scripting and configuration.
Work cross-functionally with engineers to mitigate issues, often contributing detection strategies, and occasionally direct code fixes (via pull requests).
Research emerging threats, new technologies, and attack techniques to inform internal security guidance and testing approaches.
Publish technical blog posts, speak at industry conferences, or share insights with the wider security community.
Advocate for security and privacy across engineering and product development teams.

What you bring

3–5+ years of experience in penetration testing, application security, or security engineering.
Proficiency in reading and reviewing Go and Python source code.
Strong grasp of web application security principles, authentication and authorization models, and common vulnerability patterns.
Experience with vulnerability research, business logic flaws, and application-layer abuse patterns.
Familiarity with Linux systems, intrusion detection, and common log formats.
Hands-on experience testing cloud environments (AWS, GCP, or similar) and container orchestration platforms (Docker, Kubernetes).
Knowledge of network protocols (TCP/IP, DNS) and secure architecture best practices.
Ability to work independently, structure and execute testing plans, and clearly communicate risk to technical and non-technical stakeholders.
Comfort collaborating and documenting work asynchronously using tools like Slack, GitHub, and JIRA.

Bonus points

Experience in the financial technology (fintech) industry or highly regulated environments.
Passion for improving security through fixing—not just finding—vulnerabilities.
Demonstrated history of challenging security assumptions and creatively solving complex problems.

What we offer

Challenging, high-impact work to grow your career
Performance driven compensation with multipliers for outsized impact, bonus programs, equity ownership, and 401(k) matching
Best in class benefits to fuel your work, including 100% paid health insurance for employees with 90% coverage for dependents
Lifestyle wallet - a highly flexible benefits spending account for wellness, learning, and more
Employer-paid life & disability insurance, fertility benefits, and mental health benefits
Time off to recharge including company holidays, paid time off, sick time, parental leave, and more!
Exceptional office experience with catered meals, events, and comfortable workspaces.

In addition to the base pay range listed below, this role is also eligible for bonus opportunities + equity + benefits.

Base pay for the successful applicant will depend on a variety of job-related factors, which may include education, training, experience, location, business needs, or market demands. The expected base pay range for this role is based on the location where the work will be performed and is aligned to one of 3 compensation zones. For other locations not listed, compensation can be discussed with your recruiter during the interview process.

Base Pay Range:

Zone 1 (Menlo Park, CA; New York, NY; Bellevue, WA; Washington, DC)$157,000—$185,000 USDZone 2 (Denver, CO; Westlake, TX; Chicago, IL)$139,000—$163,000 USDZone 3 (Lake Mary, FL; Clearwater, FL; Gainesville, FL)$122,000—$144,000 USD

Click here to learn more about our Total Rewards, which vary by region and entity.

If our mission energizes you and you’re ready to build the future of finance, we look forward to seeing your application.

Robinhood provides equal opportunity for all applicants, offers reasonable accommodations upon request, and complies with applicable equal employment and privacy laws. Inclusion is built into how we hire and work—welcoming different backgrounds, perspectives, and experiences so everyone can do their best. Please review the Privacy Policy for your country of application.

","hiringOrganization":{"@type":"Organization","name":"Robinhood","sameAs":"https://robinhood.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Bellevue, WA; Menlo Park, CA","addressCountry":"United States","addressRegion":"North America"}}}},{"@type":"ListItem","position":3,"item":{"@type":"JobPosting","title":"Penetration Tester","datePosted":"2025-08-11","description":"Founded in 2007 and headquartered in Columbia, Maryland, Synergy ECP is a leading provider of cybersecurity, software and systems engineering and IT services to the U.S. intelligence and defense communities. The company leverages its expertise in data transport solutions, software and systems engineering, and other solutions to deliver critical and innovative capabilities to high-level decision makers that enhance our nation’s security.
In an ultra-competitive environment, Synergy ECP has thrived by adhering to our name, making sure excellence is displayed by our Employees, to our Customers and by Improving Performance (ECP). It’s what sets us apart, enabling us to be an autonomous yet agile business that delivers huge results—showing we’re ready to meet our customers’ evolving demands. Synergy ECP has earned a client list that includes numerous Fortune 100 companies, in addition to multiple branches of the US government and military services.
Description:Serve as a Subject Matter Expert providing testing expertise of the Risk Management Framework. Direct and/or participate in the testing phase of security controls assessments using specialized knowledge of network protocols, operating systems, architectures, equipment, services, and standards.
Capabilities:·         Perform vulnerability and penetration testing using a wide variety of tools ·         Research and evaluate emerging technologies relevant to information systems security; interpret agency specific and federal security regulations·         Perform both network and application-level testing using established testing protocols and methods
Qualifications:·         Eight (8) experience of related work experience as a Penetration Tester performing both network and application-level testing using established test protocols and methods. A Bachelor’s degree in Computer Science or Information Technology Engineering. In lieu of a Bachelor’s degree, four (4) additional years of Penetration Testing experience may be substituted.·         DoD 8570 compliance with IAT III is required.
CLEARANCE REQUIRED:
·       TS/SCI w/ Polygraph
Other Requirements:
U.S. Citizenship
Compensation Spotlight:
For this role, our typical salary range starts at $180,000 and stretches up to $230,000. But here's the deal – we're not about capping your potential. We're committed to snapping up the best and brightest, and we're ready to put our money where our mouth is. So, if you're one of the rare exceptions to the status quo with the education, experience, and that extra something special, we're not afraid to go above and beyond to secure your talent. Because for us, it's not just about a salary. It's about the complete rewards package, the culture, and the opportunity to make a real impact.Taking Care of the People Who Take Care of The Nation
Compensation: We offer highly competitive compensation that is consistently recognized by our employees as being generous!
Health & Retirement: We offer a comprehensive Health Benefits package and 401K Retirement plan so you can take care of yourself and your family... both now and in the future. Other health-related benefits include an employee Gym wellness benefit, People Partners who will help you navigate both personal and professional worlds, as well as strong wellness related resources offered through our healthcare provider.
Education: Individual growth is a priority at Synergy ECP. Employees are encouraged to take advantage of our company-sponsored continuing education program so they can get their degree or that next certification needed to propel them towards the next level. Not sure what's best for your career plans, we'll help you navigate it all!
Work/Life Balance: A healthy work/life balance is essential for building and executing your work effectively at Synergy ECP, but it’s also necessary to allow you the room to pursue everything you want to develop in your personal life. We offer a generous Paid Time Off benefit and 11 paid holidays a year. Synergy ECP also provides flexible work options that work with your schedule and lifestyle.
Philanthropy: With the help of our amazing employees, Synergy ECP participates annually in building awareness, volunteering and contributing to dozens of organizations. We believe that giving back creates a sense of purpose, engagement, and fulfillment. Have a cause you are passionate about? We bet you'll find others here that care about it just as much!
Great Corporate Facilities: Come by our corporate office and enjoy a weekly happy hour, take a drive to nearby restaurants, grab a snack or coffee in our café, or utilize our collaborative office space and conference rooms.
SkillBridge: Our SkillBridge Program takes the incredible experience our servicemembers already have and shows them how to apply it within corporate environments. We are fanatical about helping our Military!
Synergy ECP is committed to providing equal employment opportunities to all qualified individuals. Employment decisions are based on merit, qualifications, and business needs. We do not discriminate on the basis of race, color, sex, national origin, religion, age, disability, or any other status protected by applicable law.
We welcome candidates from all backgrounds and are dedicated to maintaining a professional and respectful workplace where every employee can succeed.
","hiringOrganization":{"@type":"Organization","name":"Synergy ECP","sameAs":"https://www.synergyecp.com"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Central Maryland","addressCountry":"United States","addressRegion":"North America"}}}},{"@type":"ListItem","position":4,"item":{"@type":"JobPosting","title":"Penetration Tester","datePosted":"2025-08-13","description":"

GCS Application Security is building up penetration testing Centre of Excellence (COE) to deliver penetration test related capabilities for all segments in Manulife. As a tester, you will be working closely with our business team and second line of defense, to assess scope and level of effort based on identified areas of risk and execute assigned engagements in alignment to common penetration testing industry frameworks.

Position Responsibilities:

Evaluates the security posture of the organization, assessing potential threats and vulnerabilities in any of the following:
- Web Applications and/or Network Security
- Microservices
- Mobile Applications
Develops and communicates the understanding of the potential impacts of a cyber attack to all relevant stakeholders.
Evaluates different security solutions and provides advice on how to best protect the organization from cyber threats.
Ensures alignment with corporate and regulatory requirements for the management of information security program.
Performs security assessments to identify possible security vulnerabilities within the organization and develops security controls, policies and procedures to address any issues that may exist.
Conducts comprehensive network scans and manual network assessments, including penetration testing and vulnerability scans.
Write reports including technical details, risk analysis and providing remediation recommendations for identified issues.

Required Qualifications:

Bachelor’s degree holder in Computer Science, Information Technology, Cybersecurity, Information Systems, or any related discipline.
Holds an Information Security certification or is at least currently undergoing security certification/training such as OSCP, OSCE, CEH, GWAPT, GPEN, or eWPT is preferred.
At least 2 years of IT experience with a demonstrated passion for performing hands-on penetration tests on external and internal networks, operating systems, web applications, etc.
Has technical knowledge of current vulnerabilities, exploits and tools.
Understand the concepts of different VAPT capabilities and methods.
Ability to adopt the security industry best practices and immerse in procedures.
Exposure with various security assessment frameworks and procedures, and the ability to perform both manual and automated testing.
Interest in researching evolving exploits, techniques, and tools in support of penetration testing efforts.
Good verbal and written communication skills including the ability to write clear and concise assessment reports.
Good stakeholder management and interpersonal skills.
Ability to communicate with team, peers and employees.
Good time management and organizational skills.
Experience working in an international environment with people from multiple cultures is preferred.
Fresh graduates of relevant courses are encouraged to apply.

When you join our team:

We’ll empower you to learn and grow the career you want.
We’ll recognize and support you in a flexible environment where well-being and inclusion are more than just words.
As part of our global team, we’ll support you in shaping the future you want to see.

About Manulife and John Hancock

Manulife Financial Corporation is a leading international financial services provider, helping people make their decisions easier and lives better. To learn more about us, visit https://www.manulife.com/en/about/our-story.html.

Manulife is an Equal Opportunity Employer

At Manulife/John Hancock, we embrace our diversity. We strive to attract, develop and retain a workforce that is as diverse as the customers we serve and to foster an inclusive work environment that embraces the strength of cultures and individuals. We are committed to fair recruitment, retention, advancement and compensation, and we administer all of our practices and programs without discrimination on the basis of race, ancestry, place of origin, colour, ethnic origin, citizenship, religion or religious beliefs, creed, sex (including pregnancy and pregnancy-related conditions), sexual orientation, genetic characteristics, veteran status, gender identity, gender expression, age, marital status, family status, disability, or any other ground protected by applicable law.

It is our priority to remove barriers to provide equal access to employment. A Human Resources representative will work with applicants who request a reasonable accommodation during the application process. All information shared during the accommodation request process will be stored and used in a manner that is consistent with applicable laws and Manulife/John Hancock policies. To request a reasonable accommodation in the application process, contact recruitment@manulife.com.

Working Arrangement

Hybrid","hiringOrganization":{"@type":"Organization","name":"Manulife Financial","sameAs":"https://www.manulife.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Manila, Manulife Business Processing Services, Philippines","addressCountry":"Philippines","addressRegion":"Asia/Pacific"}}}},{"@type":"ListItem","position":5,"item":{"@type":"JobPosting","title":"Penetration tester","datePosted":"2025-08-14","description":"

Your Team Responsibilities

We are looking for a Penetration tester at MSCI!

The organization has strengthened its application defense by implementing secure coding practices, managing third-party dependencies, enhancing container security, and improving CI/CD pipeline controls. These efforts are underpinned by a strong focus on secure architecture and empowering developers with the necessary tools and knowledge. Offensive security capabilities have also been expanded to include comprehensive testing strategies, real-world threat simulations, and close collaboration with threat intelligence teams to proactively identify and mitigate risks. In parallel, advancements in automation, vulnerability management, reporting, and system resilience contribute to efficient and scalable security operations. Ongoing initiatives also prioritize the integration of emerging technologies such as AI, along with threat modeling and the application of advanced security techniques, all aimed at further developing the team's expertise and preparedness.

Your Key Responsibilities

Manage the execution of penetration tests performed by MSCI vendors.
Under the direction of senior AppSec staff, perform internal penetration tests:

Identify and exploit vulnerabilities in applications

Document findings and recommend remediation strategies

Collaborate with Cybersecurity and Engineering Teams to enhance security protocols.

Conduct Security Assessments and Risk Analysis

Develop and maintain security testing plans and protocols

Develop and implement recommendations to enhance MSCI's pen testing process with particular attention paid to enhancing the MSCI application owner/staff and vendor experience
Performing operational tasks and engaging in proactive research and exploration of new technologies aligned with team objectives

Your skills and experience that will help you excel

Advanced skills in planning and conducting penetration testing activities for both applications and infrastructure. Incorporating new tools and frameworks into pen-testing procedures, and assisting development teams in developing remediation options
A moderate understanding of modern cloud and on-premises infrastructure concepts, encompassing federated authentication and authorization (OAuth experience is beneficial), Active Directory, networking essentials (such as VNets, routing, switching, advanced firewalls), DNS management, databases, middleware, and Linux administration
Experience with cloud environments and configurations (Azure, GCP, AWS) is beneficiary
Good understanding of network protocols, cryptography, and security vulnerabilities is beneficiary
Strong written and verbal communication skills in English
Cybersecurity certification is preferred
Deep understanding of the different penetration testing tools (e.g.: Metasploit, Burp Suite, Nessus)
Bachelor degree in relevant field is required

About MSCI

What we offer you

Transparent compensation schemes and comprehensive employee benefits, tailored to your location, ensuring your financial security, health, and overall wellbeing.

Flexible working arrangements, advanced technology, and collaborative workspaces.

A culture of high performance and innovation where we experiment with new ideas and take responsibility for achieving results.

A global network of talented colleagues, who inspire, support, and share their expertise to innovate and deliver for our clients.

Global Orientation program to kickstart your journey, followed by access to our Learning@MSCI platform, LinkedIn Learning Pro and tailored learning opportunities for ongoing skills development.

Multi-directional career paths that offer professional growth and development through new challenges, internal mobility and expanded roles.

We actively nurture an environment that builds a sense of inclusion belonging and connection, including eight Employee Resource Groups. All Abilities, Asian Support Network, Black Leadership Network, Climate Action Network, Hola! MSCI, Pride & Allies, Women in Tech, and Women’s Leadership Forum.

At MSCI we are passionate about what we do, and we are inspired by our purpose – to power better investment decisions. You’ll be part of an industry-leading network of creative, curious, and entrepreneurial pioneers. This is a space where you can challenge yourself, set new standards and perform beyond expectations for yourself, our clients, and our industry.

MSCI is a leading provider of critical decision support tools and services for the global investment community. With over 50 years of expertise in research, data, and technology, we power better investment decisions by enabling clients to understand and analyze key drivers of risk and return and confidently build more effective portfolios. We create industry-leading research-enhanced solutions that clients use to gain insight into and improve transparency across the investment process.

MSCI Inc. is an equal opportunity employer. It is the policy of the firm to ensure equal employment opportunity without discrimination or harassment on the basis of race, color, religion, creed, age, sex, gender, gender identity, sexual orientation, national origin, citizenship, disability, marital and civil partnership/union status, pregnancy (including unlawful discrimination on the basis of a legally protected parental leave), veteran status, or any other characteristic protected by law. MSCI is also committed to working with and providing reasonable accommodations to individuals with disabilities. If you are an individual with a disability and would like to request a reasonable accommodation for any part of the application process, please email Disability.Assistance@msci.com and indicate the specifics of the assistance needed. Please note, this e-mail is intended only for individuals who are requesting a reasonable workplace accommodation; it is not intended for other inquiries.

To all recruitment agencies

MSCI does not accept unsolicited CVs/Resumes. Please do not forward CVs/Resumes to any MSCI employee, location, or website. MSCI is not responsible for any fees related to unsolicited CVs/Resumes.

Note on recruitment scams

We are aware of recruitment scams where fraudsters impersonating MSCI personnel may try and elicit personal information from job seekers. Read our full note on careers.msci.com

","hiringOrganization":{"@type":"Organization","name":"MSCI","sameAs":"https://www.msci.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Budapest, PE, Hungary","addressCountry":"Hungary","addressRegion":"Europe"}}}},{"@type":"ListItem","position":6,"item":{"@type":"JobPosting","title":"Penetration Tester","datePosted":"2025-08-15","description":"

At Bishop Fox, security isn't just a job—it's our passion. As leaders in continuous offensive security and penetration testing, we deliver world-class customer experiences. Trusted by over a quarter of the Fortune 100, half of the Fortune 10, and top global media companies, we help safeguard digital landscapes. Our Cosmos platform, honored as Best Emerging Technology by SC Media, exemplifies our commitment to innovation.

Joining Bishop Fox means collaborating with a curious and dedicated team. You'll tackle complex challenges for some of the world's most recognized organizations, securing their networks against real-world threats. With nearly 20 years of industry contributions—including 16 open-source tools and 50 security advisories published in the past five years—we're committed to making the digital world safer.

Who You Are and What You’ll Do

You’re a penetration tester who knows their way around source code. You’ve plundered apps and pillaged networks (legally, of course). You have a passion for hacking and information security. You may also have written a few blog posts about your favorite hacks or have presented at a handful of conferences, with an eye to doing more.

With Bishop Fox, your responsibilities would include testing web applications, hacking networks, and reversing software. As a consultant, you’ll work on a variety of projects which include short-term engagements and extended program work with well-established clients. You'll solve challenging technical problems and build creative solutions. As a trusted advisor, you’ll provide your expert opinion to help our clients navigate difficult business decisions.

Your Experience

4+ years of experience in planning, conducting, and managing web application penetration tests
5+ years of application security experience
Experience with AWS cloud environments preferred, with an understanding of its major technologies, such as IAM, EC2, VPC, EBS, S3, CloudWatch, and Lambdas, and how to keep them secure
Experience with cloud platforms and technologie,s including Azure, GCP, Docker, and Kubernetes
Deep understanding of security fundamentals (OWASP), common vulnerabilities, and application security best practices
Skilled in vulnerability assessment and the development of exploits for diverse targets
A background in system and network security, authentication and security protocols, and applied cryptography is helpful
Experience with programming and scripting languages such as Python, Ruby, PowerShell, Java, JavaScript, etc.
Proficiency with operating systems- Linux, Windows, MacOS
Experience with network and system exploitation, including modern tactics, techniques, and procedures (e.g. c2 frameworks, EDR bypass, privilege escalation, password cracking, lateral movement, etc.)
Strong technical reporting and documentation skills
English communication skills (written and spoken) are required.
Advanced relevant academic training, such as a degree in Computer Science or an OSCP, is a definite bonus

Why Bishop Fox

At Bishop Fox, we're driven by a simple mission: deliver exceptional quality to our clients, foster a vibrant and fulfilling environment for our team, and champion excellence within our industry. Our core values, which we live by every day, are:

Be Excellent to Each Other

Do the Right Thing

Do What You’ll Say You’ll Do

Get Better Together

Give a Sh*t

At Bishop Fox, we're committed to providing benefits that support your well-being and professional growth. Here's a glimpse of what we offer:

Generous Time Off and Company-Wide Holidays

Team Events and International Travel Opportunities

Work From Home Support

Food Coupons

Training Budget

Saving Fund

Health Insurance Options Including Medical, Dental, Vision

Law Benefits and more!

Bishop Fox is an Equal Opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex including sexual orientation and gender identity, national origin, disability, protected veteran status, or any other characteristic protected by applicable federal, state, or local law. All new hires must pass a background check as a condition of employment.

Interested? Apply today!

","hiringOrganization":{"@type":"Organization","name":"Bishop Fox","sameAs":"https://bishopfox.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Mexico, Remote","addressCountry":"Mexico","addressRegion":"North America"}}}},{"@type":"ListItem","position":7,"item":{"@type":"JobPosting","title":"Penetration Tester","datePosted":"2025-08-19","description":"

Employment Type

Permanent

Closing Date

26 Aug 2025 11:59pm

Job Title

Penetration Tester

Job Summary

As a Security Testing-Senior Specialist, you have a passion for security and ethical hacking and are equally motivated to build Telstra’s awareness and understanding of security policies, standards and procedures. You thrive on building a deep understanding of how best to protect the organisation's data whilst making innovative recommendations for changes and improvements. Your expertise in vulnerability assessment and penetration testing is critical to identifying and resolving security weaknesses that pose a risk to Telstra and our customers.

Job Description

Are you an Australian citizen based anywhere in Australia who wants your work to directly protect millions of Australians across families, communities, and critical services by strengthening the systems they rely on every day?

Curious, creative, and security-savvy? If so, read on.

We’re inviting applications from those who see a login screen and wonder what’s behind it (ethically, of course). If you thrive on solving complex problems, enjoy mentoring others, and love the idea of making systems stronger by testing their limits, this is the role for you.

You'll lead high-impact security assessments, shape future capabilities, and embed automation into our testing program—all while working flexibly in a team that supports you to do your best work, your way. You’ll be joining a supportive, experienced team that values knowledge-sharing, mentoring, and celebrating each other's wins.

What You’ll Be Doing

Conducting white, grey, and black box penetration tests
Reviewing source code to uncover hidden vulnerabilities
Leading vulnerability assessments across systems and networks
Driving automation and process improvements
Mentoring team members and promoting secure coding practices
Collaborating across teams to strengthen Telstra’s security posture

What You Bring

7+ years in security testing, including 3+ years in penetration testing and source code review
Strong scripting and automation skills
Experience with CI/CD pipelines and security tool integration
Ability to communicate technical risks clearly to diverse stakeholders
Industry certifications like OSCP, OSWE, CREST, CISSP, GPEN, or GWAPT are a plus

Why Telstra?

Flexible work that works for you – remote-first, hybrid options, and genuine flexibility
Support to grow – lead, learn, and take on new challenges with confidence
Inclusive and collaborative culture – we value different perspectives, backgrounds, and ideas
Purposeful work – help protect millions of Australians and build a safer digital future
Tools that empower – access to cutting-edge tech, a smart team, and space to make an impact

Ready to make your mark?

We’re building a team as diverse as the country we protect. Don’t worry if you don’t tick every box if you’re passionate, curious, and eager to grow, we want to hear from you.

Apply today and help secure Australia—one vulnerability at a time

We're amongst the top 2% of companies globally in the CDP Global Climate Change Index 2023, being awarded an 'A' rating. If you want to work for a company that cares about sustainability, we want to hear from you.

As part of your application with Telstra, you may receive communications from us on +61 440 135 548

When you join our team, you become part of a welcoming and inclusive community where everyone is respected, valued and celebrated. We actively seek individuals from various backgrounds, ethnicities, genders and disabilities because we know that diversity not only strengthens our team but also enriches our work. We have zero tolerance for harassment of any kind, and we prioritise creating a workplace culture where everyone is safe and can thrive.

As part of the hiring process, all identified candidates will undergo a background check, and the results will play a role in the final decision regarding your application.

We work flexibly at Telstra. Talk to us about what flexibility means to you. When you apply, you can share your pronouns and / or any reasonable adjustments needed to take part equitably during the recruitment process.

We are aware of current limitations with our website accessibility and are working towards improving this. Should you experience any issues accessing information or the application form, and require this in an alternate format, please contact our Talent Acquisition team on DisabilityandAccessibility@team.telstra.com or via the additional contact options found at www.telstra.com.au/careers/diversity-equity-and-inclusion/disability-employment

","hiringOrganization":{"@type":"Organization","name":"Telstra","sameAs":"https://www.telstra.com.au/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"242 Exhibition St, Australia","addressCountry":"Australia","addressRegion":"Asia/Pacific"}}}},{"@type":"ListItem","position":8,"item":{"@type":"JobPosting","title":"Game Penetration Tester","datePosted":"2025-07-20","description":"

Cyrex is a native security and software development company. We’re focused on building the next generation of top-notch software for web, mobile, and native. Coupled with our extensive background in ethical hacking and cyber crime, we’ve established ourselves as a trusted partner to over 700 clients worldwide. Serving clients of all size, from startups to full-scale enterprises, we work with a diverse, international team of experts providing custom-made development support.

Cyrex aims to drive innovation and creativity within the tech industry by combining both their technical expertise and creative thinking to create bulletproof security solutions and reliable software.

Long story short, we are an awesome team of tech savvy boys and girls who want to be the best at what we do.
If you are awesome too, let’s meet!

We are looking for a Game Penetration Tester to join our team. The ideal candidate will have extensive full-time penetration testing experience in games. As a hands-on penetration tester, you will work together with the team securing world-class gaming titles. Your primary goal is to find vulnerabilities in game titles using our proprietary tooling.

What you will do:

Collaborate with several team members at the same time.
Test mobile, PC and console games for security vulnerabilities.
Report findings in a professional manner.
Work with custom Python and C++ tooling.

Requirements

Expert knowledge on different vulnerabilities.
Expertise in finding and exploiting vulnerabilities.
Experience in pentesting of mobile applications and thick clients.
Great understanding and experience in Python and C++.
Strong knowledge about serialization and cryptographic algorithms.
Capable of mentoring, from juniors to seniors.
Excellent communication skills.
Flexibility and ability to adapt to new technological changes as per project need.
5+ years of experience in penetration testing.
A passion for video games.

Desirable pluses:

Have worked on several projects at the same time.
Experienced with multiplayer gameplay systems, network replication and various gaming engines.
Solid technical foundation (e.g. Computer Science / Maths Degree or equivalent).

Benefits

Permanently remote position.
An opportunity to hone and improve your skills by applying them to a diverse variety of engaging projects.
Be part of an international group with offices worldwide.
Career growth and development.
Working closely with a team of like-minded people in a fast-paced, multicultural environment.
Ongoing training and professional self-improvement opportunities.
Flexible working hours.
An inclusive culture and open communication.

","hiringOrganization":{"@type":"Organization","name":"Cyrex","sameAs":"https://cyrextech.net/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Rio de Janeiro, State of Rio de Janeiro, Brazil - Remote","addressCountry":"Brazil","addressRegion":"South America"}}}},{"@type":"ListItem","position":9,"item":{"@type":"JobPosting","title":"Penetration Tester (Cybersecurity)","datePosted":"2025-07-16","description":"

The position is described below. If you want to apply, click the Apply Now button at the top or bottom of this page. After you click Apply Now and complete your application, you'll be invited to create a profile, which will let you see your application status and any communications. If you already have a profile with us, you can log in to check status.

Need Help?

If you have a disability and need assistance with the application, you can request a reasonable accommodation. Send an email to Accessibility (accommodation requests only; other inquiries won't receive a response).

Regular or Temporary:

Regular

Language Fluency: English (Required)

Work Shift:

1st shift (United States of America)

Please review the following job description:

***This Opening is Office Centric 4 days a week in either Raleigh or Atlanta office***

Are you a skilled and motivated Penetration tester and want to join our Pentest team?

The ideal candidate will be responsible for conducting thorough security assessments of our web applications, Thick Clients, Mainframes, Network Boundary and other on-demand tests with a goal of identifying vulnerabilities, and working closely with development teams to enhance our overall security posture.

Following is a summary of the essential functions for this job.  Other duties may be performed, both major and minor, which are not mentioned below.  Specific activities may change from time to time.

Schedule and conduct demo sessions with application teams to understand the functionality and architecture of target applications

Perform comprehensive penetration tests on a set list of web applications, adhering to industry-standard best practices for each test

Utilize a variety of tools including Burp Suite, Metasploit, Kali Linux, Nessus, and other relevant hacking tools

Conduct testing across diverse environments, including on-premises, APIs, AWS, Azure infrastructures

Document and report vulnerabilities, including detailed explanations, reproduction steps, and potential impacts

Provide clear and actionable recommendations for remediation to development teams

Conduct retests to verify the successful resolution of identified vulnerabilities

Stay updated with the latest web application security threats and testing methodologies

Desires

1-3 years of experience in web application penetration testing or equivalent experience with platforms such as HackTheBox, TryHackMe, Proving Grounds, VulnHub or GitHub

Demonstrated ability to discover and exploit web application vulnerabilities

Experienced in using penetration testing tools such as Burp Suite, Metaspoit, and Nessus

Familiarity with cloud environments

Strong understanding of web technologies, protocols, and common security vulnerabilities

Excellent written and verbal communication skills for reporting and presenting vulnerabilities

Understanding of networking fundamentals such as TCP/IP, subnetting, and the OSI model

Working knowledge of common network protocols such as HTTPS, SMB, SNMP, and LLMNR

Familiarity with the concept of the Software Development Life Cycle (SDLC) and how security practices are integrated within software development

Understanding of industry-standard security frameworks such as MITRE ATT&CK.

Knowledge of the OWASP framework and the OWASP Top 10

Personality Traits

Self-Starter with a strong drive for continuous learning and improvement

Highly analytical mindset with exceptional problem-solving skills

Meticulous attention to detail and well-organized work approach

Ability to work independently and collaboratively in a team/multi-team environment

Required Qualifications:

The requirements listed below are representative of the knowledge, skill and/or ability required.  Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

Bachelor’s degree and five years of experience in systems engineering or administration or an equivalent combination of education and work experience.

In-depth knowledge in applied enterprise information security technologies including but not limited to firewalls, intrusion detection/prevention systems, network operating systems, identity management, database activity monitoring, encryption, content filtering, and Mainframe security.

Previous experience in planning and managing IT projects

Preferred Qualifications:

Bachelor’s degree and six years of experience or an equivalent combination of education and work experience.

Banking or financial services experience

Certifications such as CompTIA Pentest +, OSCP, OSQW, or other relevant offensive security certifications

Experience with scripting languages such as python and bash

Knowledge of regulatory compliance standards (NYDFS, NIST CSF, PCI-DSS, SOX, SOC1, UCF)

Published CVE/CWE contributions, hackathon participation, CTF events, and independent security projects

Apply today if you are passionate about web application security, have a knack for finding vulnerabilities, and enjoy the challenge of continuously learning about emerging threats. Join our team and help safeguard our digital assets.

Other Job Requirements / Working Conditions

Sitting

Constantly (More than 50% of the time)

Visual / Audio / Speaking

Able to access and interpret client information received from the computer and able to hear and speak with individuals in person and on the phone.

Manual Dexterity / Keyboarding

Able to work standard office equipment, including PC keyboard and mouse, copy/fax machines, and printers.

Availability

Able to work all hours scheduled, including overtime as directed by manager/supervisor and required by business need.

Travel

Minimal and up to 10%

General Description of Available Benefits for Eligible Employees of Truist Financial Corporation: All regular teammates (not temporary or contingent workers) working 20 hours or more per week are eligible for benefits, though eligibility for specific benefits may be determined by the division of Truist offering the position. Truist offers medical, dental, vision, life insurance, disability, accidental death and dismemberment, tax-preferred savings accounts, and a 401k plan to teammates. Teammates also receive no less than 10 days of vacation (prorated based on date of hire and by full-time or part-time status) during their first year of employment, along with 10 sick days (also prorated), and paid holidays. For more details on Truist’s generous benefit plans, please visit our Benefits site. Depending on the position and division, this job may also be eligible for Truist’s defined benefit pension plan, restricted stock units, and/or a deferred compensation plan. As you advance through the hiring process, you will also learn more about the specific benefits available for any non-temporary position for which you apply, based on full-time or part-time status, position, and division of work.

Truist is an Equal Opportunity Employer that does not discriminate on the basis of race, gender, color, religion, citizenship or national origin, age, sexual orientation, gender identity, disability, veteran status, or other classification protected by law. Truist is a Drug Free Workplace.

EEO is the Law Pay Transparency Nondiscrimination Provision E-Verify

","hiringOrganization":{"@type":"Organization","name":"Truist","sameAs":"https://www.truist.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Raleigh NC - 3201 Beechleaf Court, United States","addressCountry":"United States","addressRegion":"North America"}}}},{"@type":"ListItem","position":10,"item":{"@type":"JobPosting","title":"Penetration Tester III","datePosted":"2025-08-03","description":"AboutAutoRoboto is a consulting firm that specializes in engineering and management that has provided services for some of the largest tech companies in the San Francisco Bay Area. These services include mechanical, electrical, software design, data collection quality assurance, and testing of new hardware and software. We pride ourselves on being a small company able to be extremely flexible to customers ever changing demands.
The RoleAs a penetration tester, you’ll take a proactive, offensive role in cybersecurity by performing penetration attacks on existing digital systems. These tests might use a variety of hacking tools and techniques to find gaps that hackers could exploit. Throughout the process, you’ll document your actions in detail and create a report on what you did and how successful you were at breaching security protocols. \n

Responsibilities

Design and conduct engineering attacks
Develop methodologies for penetration testing
Document security and compliance issues
Automate common testing techniques to improve efficiency
Research, evaluate, and write technical and executive reports and communicate findings to both technical staff and executive leadership
Pinpoint methods and entry points that attackers may use to exploit vulnerabilities or weaknesses
Identify areas where improvement is needed

Qualifications

Research or work experience in facial recognition
Good working knowledge of linux command line
Critical thinker and problem solver
Excellent organizational and time management skills
Excellent communications skills and ability to document and share findings
An ability to “think like the enemy” in order to combat the full range of techniques and strategies that hackers might employ, or even to anticipate new ones

Preferred Qualifications

2+ years experience in mobile testing, scientific lab work, or thorough debugging experience
1+ year experience in animation / game development
Proficiency with Photoshop
Photography advanced knowledge
Experience using 3d printers and other maker space tools

Benefits
Health InsuranceVisionDentalLife401k matchTuition reimbursementPaid maternity/paternity leavePaid holidays per yearPaid vacation","hiringOrganization":{"@type":"Organization","name":"AutoRoboto","sameAs":"https://autoroboto.io/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Mountain View, CA","addressCountry":"United States","addressRegion":"North America"}}}},{"@type":"ListItem","position":11,"item":{"@type":"JobPosting","title":"Penetration Tester II","datePosted":"2025-08-03","description":"AboutAutoRoboto is a consulting firm that specializes in engineering and management that has provided services for some of the largest tech companies in the San Francisco Bay Area. These services include mechanical, electrical, software design, data collection quality assurance, and testing of new hardware and software. We pride ourselves on being a small company able to be extremely flexible to customers ever changing demands.
The RoleAs a penetration tester, you’ll take a proactive, offensive role in cybersecurity by performing penetration attacks on existing digital systems. These tests might use a variety of hacking tools and techniques to find gaps that hackers could exploit. Throughout the process, you’ll document your actions in detail and create a report on what you did and how successful you were at breaching security protocols. \n

Responsibilities

Analyze attacks and perform reverse engineering to define vulnerabilities
Planning and executing tests, documenting your methodologies, and creating detailed reports about your findings.
Create new testing methods to identify vulnerabilities
Identify security weaknesses - Pinpoint methods and entry points that attackers may use to exploit vulnerabilities or weaknesses
Collaborating with team members to creatively solve problems

Qualifications

Good working knowledge of linux command line
Critical thinker and problem solver
Excellent organizational and time management skills
Excellent communications skills and ability to document and share findings
Strong collaboration skills and experience working cross-functionally
An ability to “think like the enemy” in order to combat the full range of techniques and strategies that hackers might employ, or even to anticipate new ones

Preferred Qualifications

2+ years experience in mobile testing, scientific lab work, or thorough debugging experience
1+ year experience in animation / game development
Research or work experience in facial recognition
Proficiency with Photoshop
Photography advanced knowledge
Experience using 3d printers and other maker space tools

Benefits
Health InsuranceVisionDentalLife401k matchTuition reimbursement Paid maternity/paternity leave Paid holidays per yearPaid vacation","hiringOrganization":{"@type":"Organization","name":"AutoRoboto","sameAs":"https://autoroboto.io/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Mountain View, CA","addressCountry":"United States","addressRegion":"North America"}}}},{"@type":"ListItem","position":12,"item":{"@type":"JobPosting","title":"Lead Penetration Tester","datePosted":"2025-08-03","description":"AboutAutoRoboto is a consulting firm that specializes in engineering and management that has provided services for some of the largest tech companies in the San Francisco Bay Area. These services include mechanical, electrical, software design, data collection, quality assurance, and testing of new hardware and software. We pride ourselves on being a small company able to be extremely flexible to our customers' ever changing demands.
The RoleAs the lead penetration tester, you’ll lead our penetration testing team while taking a proactive, offensive role in cybersecurity by overseeing the performance of penetration attacks on existing biometric systems. These tests might use a variety of hacking tools and techniques to find gaps that hackers could exploit. Throughout the process, you’ll document your team's actions in detail and create a report on what you did and how successful you were at breaching security protocols.
In addition to determining new exploits. You will have the ability to help scope our automation efforts in testing for these vulnerabilities in the future.\n

Responsibilities

Manage existing team of penetration testers
Design and conduct engineering attacks
Develop methodologies for penetration testing
Document security and compliance issues
Automate common testing techniques to improve efficiency
Research, evaluate, and write technical and executive reports and communicate findings to both technical staff and executive leadership
Pinpoint methods and entry points that attackers may use to exploit vulnerabilities or weaknesses
Identify areas where improvement is needed or processes can be optimized

Qualifications

Experience managing or mentoring others
Research or work experience in facial recognition
Good working knowledge of linux command line
Critical thinker and problem solver
Excellent organizational and time management skills
Excellent communications skills and ability to document and share findings
An ability to “think like the enemy” in order to combat the full range of techniques and strategies that hackers might employ, or even to anticipate new ones

Preferred Qualifications

2+ years experience in mobile testing, scientific lab work, or thorough debugging experience
1+ year experience in animation / game development
Proficiency with Photoshop
Photography advanced knowledge
Experience using 3d printers and other maker space tools
Ethical hacker

Benefits
Health InsuranceVisionDentalLife401k matchTuition reimbursementPaid maternity/paternity leavePaid holidays per yearPaid vacation","hiringOrganization":{"@type":"Organization","name":"AutoRoboto","sameAs":"https://autoroboto.io/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Mountain View, CA","addressCountry":"United States","addressRegion":"North America"}}}},{"@type":"ListItem","position":13,"item":{"@type":"JobPosting","title":"Penetration Tester I","datePosted":"2025-08-03","description":"AboutAutoRoboto is a consulting firm that specializes in engineering and management that has provided services for some of the largest tech companies in the San Francisco Bay Area. These services include mechanical, electrical, software design, data collection quality assurance, and testing of new hardware and software. We pride ourselves on being a small company able to be extremely flexible to customers ever changing demands.
The RoleAs a penetration tester, you’ll take a proactive, offensive role in cybersecurity by performing penetration attacks on existing digital systems. These tests might use a variety of hacking tools and techniques to find gaps that hackers could exploit. Throughout the process, you’ll document your actions in detail and create a report on what you did and how successful you were at breaching security protocols. \n

Responsibilities

Analyze attacks and perform reverse engineering to define vulnerabilities
Planning and executing tests, documenting your methodologies, and creating detailed reports about your findings.
Create new testing methods to identify vulnerabilities
Identify security weaknesses - Pinpoint methods and entry points that attackers may use to exploit vulnerabilities or weaknesses

Qualifications

2+ years experience in mobile testing, scientific lab work, or thorough debugging experience
1+ year experience in animation / game development
Research or work experience in facial recognition
Proficiency with Photoshop
Photography advanced knowledge
Experience using 3d printers and other maker space tools
Good working knowledge of linux command line
Quality Assurance experience
Photography experience
Critical thinker and creative problem solver
Excellent organizational and time management skills
Excellent communications skills and ability to document and share findings
An ability to “think like the enemy” in order to combat the full range of techniques and strategies that hackers might employ, or even to anticipate new ones

","hiringOrganization":{"@type":"Organization","name":"AutoRoboto","sameAs":"https://autoroboto.io/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Mountain View, CA","addressCountry":"United States","addressRegion":"North America"}}}},{"@type":"ListItem","position":14,"item":{"@type":"JobPosting","title":"Senior Penetration Tester","datePosted":"2025-08-05","description":"

Kaseya® is the leading provider of complete IT infrastructure and security management solutions for Managed Service Providers (MSPs) and internal IT organizations worldwide powered by AI. Kaseya’s best-in-breed technologies allow organizations to efficiently manage and secure IT to drive sustained business success. Kaseya has achieved sustained, strong double-digit growth over the past several years and is backed by Insight Venture Partners www.insightpartners.com), a leading global private equity firm investing in high-growth technology and software companies that drive transformative change in the industries they serve.

Founded in 2000, Kaseya currently serves customers in over 20 countries across a wide variety of industries and manages over 15 million endpoints worldwide. To learn more about our company and our award-winning solutions, go to www.Kaseya.com and for more information on Kaseya’s culture.

Kaseya is not your typical company. We are not afraid to tell you exactly who we are and our expectations. The thousands of people that succeed at Kaseya are prepared to go above and beyond for the betterment of our customers.

At Vonahi Security, work is more than a job - it's a passion: To hack. To tinker. To exploit. To collaborate. To automate. To make an impact. To build the future of automated network penetration testing. Not just to do something better, but to attempt things you've never thought were possible. Are you ready to push the boundaries in this new era of infosec and solve one of the industry’s most challenging problems? If so, let's talk.

Why Join?

We're pushing the boundaries of technology with automation.

Our entire company is 100% remote.

Focus on expanding your knowledge and skills.

Our company culture is all about teamwork, innovation, and helping each other.

Flexible working hours, although US business hours are preferred.

Primary Responsibilities

Stay updated with the latest and greatest security vulnerabilities and available exploits to incorporate into the platform.

Document and streamline development best practices and initiatives.
Collaborate with the penetration testing team on new tools and strategies for expanding the framework.

Qualifications

Must be comfortable performing post-exploitation in Active Directory and enterprise environments with no assistance.

Must possess and demonstrate experience with in a language such as Ruby and/or Python.object-oriented programming (OOP).

Experience with MVC frameworks, especially Ruby on Rails, is a huge plus.

Must possess knowledge in either Ruby or Python.

Must be able to use Linux without any assistance.

Must be familiar with standard penetration testing tools (e.g. Nmap, Metasploit, etc.).

Ability to adapt and learn new creative ways to solve inefficiencies through automation.

Understanding of networking protocols and terminology.

Passion for developing new tools and scripts to solve problems.

Excellent teamwork and collaboration skills.

Primarily focus on network penetration testing.

About Vonahi Security

Vonahi Security developed vPenTest, a SaaS platform that automates network penetration testing and delivers continuous testing at a fraction of the cost of an outsourced consultant. The future of offensive cybersecurity consulting services through automation starts here. We are headquartered in Atlanta, GA. Visit www.vonahi.io to learn more.

At Vonahi Security, we work with organizations of all sizes to deliver real business value by:

Validating security vulnerabilities with the industry’s golden standard: network penetration testing.

Making offensive security more affordable with automation
Offering internal and external network penetration testing on a continuous basis without all the headaches, just a few clicks.

Join the Kaseya growth rocket ship and see how we are #ChangingLives !

Additional information
Kaseya provides equal employment opportunity to all employees and applicants without regard to race, religion, age, ancestry, gender, sex, sexual orientation, national origin, citizenship status, physical or mental disability, veteran status, marital status, or any other characteristic protected by applicable law.

","hiringOrganization":{"@type":"Organization","name":"Kaseya","sameAs":"https://www.kaseya.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Vancouver, British Columbia, Canada","addressCountry":"Canada","addressRegion":"North America"}}}},{"@type":"ListItem","position":15,"item":{"@type":"JobPosting","title":"Senior Penetration Tester","datePosted":"2025-08-05","description":"

Why Join?

We're pushing the boundaries of technology with automation.

Our entire company is 100% remote.

Focus on expanding your knowledge and skills.

Our company culture is all about teamwork, innovation, and helping each other.

Flexible working hours, although US business hours are preferred.

Primary Responsibilities

Stay updated with the latest and greatest security vulnerabilities and available exploits to incorporate into the platform.

Document and streamline development best practices and initiatives.
Collaborate with the penetration testing team on new tools and strategies for expanding the framework.

Qualifications

Must be comfortable performing post-exploitation in Active Directory and enterprise environments with no assistance.

Must possess and demonstrate experience with in a language such as Ruby and/or Python.object-oriented programming (OOP).

Experience with MVC frameworks, especially Ruby on Rails, is a huge plus.

Must possess knowledge in either Ruby or Python.

Must be able to use Linux without any assistance.

Must be familiar with standard penetration testing tools (e.g. Nmap, Metasploit, etc.).

Ability to adapt and learn new creative ways to solve inefficiencies through automation.

Understanding of networking protocols and terminology.

Passion for developing new tools and scripts to solve problems.

Excellent teamwork and collaboration skills.

Primarily focus on network penetration testing.

About Vonahi Security

At Vonahi Security, we work with organizations of all sizes to deliver real business value by:

Validating security vulnerabilities with the industry’s golden standard: network penetration testing.

Making offensive security more affordable with automation
Offering internal and external network penetration testing on a continuous basis without all the headaches, just a few clicks.

Join the Kaseya growth rocket ship and see how we are #ChangingLives !

","hiringOrganization":{"@type":"Organization","name":"Kaseya","sameAs":"https://www.kaseya.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Orlando, Florida, United States","addressCountry":"United States","addressRegion":"North America"}}}},{"@type":"ListItem","position":16,"item":{"@type":"JobPosting","title":"Senior Penetration Tester","datePosted":"2025-08-05","description":"

Why Join?

We're pushing the boundaries of technology with automation.

Our entire company is 100% remote.

Focus on expanding your knowledge and skills.

Our company culture is all about teamwork, innovation, and helping each other.

Flexible working hours, although US business hours are preferred.

Primary Responsibilities

Stay updated with the latest and greatest security vulnerabilities and available exploits to incorporate into the platform.

Document and streamline development best practices and initiatives.
Collaborate with the penetration testing team on new tools and strategies for expanding the framework.

Qualifications

Must be comfortable performing post-exploitation in Active Directory and enterprise environments with no assistance.

Must possess and demonstrate experience with in a language such as Ruby and/or Python.object-oriented programming (OOP).

Experience with MVC frameworks, especially Ruby on Rails, is a huge plus.

Must possess knowledge in either Ruby or Python.

Must be able to use Linux without any assistance.

Must be familiar with standard penetration testing tools (e.g. Nmap, Metasploit, etc.).

Ability to adapt and learn new creative ways to solve inefficiencies through automation.

Understanding of networking protocols and terminology.

Passion for developing new tools and scripts to solve problems.

Excellent teamwork and collaboration skills.

Primarily focus on network penetration testing.

About Vonahi Security

At Vonahi Security, we work with organizations of all sizes to deliver real business value by:

Validating security vulnerabilities with the industry’s golden standard: network penetration testing.

Making offensive security more affordable with automation
Offering internal and external network penetration testing on a continuous basis without all the headaches, just a few clicks.

Join the Kaseya growth rocket ship and see how we are #ChangingLives !

","hiringOrganization":{"@type":"Organization","name":"Kaseya","sameAs":"https://www.kaseya.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Red Bank, New Jersey, United States","addressCountry":"United States","addressRegion":"North America"}}}},{"@type":"ListItem","position":17,"item":{"@type":"JobPosting","title":"Senior Penetration Tester","datePosted":"2025-08-05","description":"

Why Join?

We're pushing the boundaries of technology with automation.

Our entire company is 100% remote.

Focus on expanding your knowledge and skills.

Our company culture is all about teamwork, innovation, and helping each other.

Flexible working hours, although US business hours are preferred.

Primary Responsibilities

Stay updated with the latest and greatest security vulnerabilities and available exploits to incorporate into the platform.

Document and streamline development best practices and initiatives.
Collaborate with the penetration testing team on new tools and strategies for expanding the framework.

Qualifications

Must be comfortable performing post-exploitation in Active Directory and enterprise environments with no assistance.

Must possess and demonstrate experience with in a language such as Ruby and/or Python.object-oriented programming (OOP).

Experience with MVC frameworks, especially Ruby on Rails, is a huge plus.

Must possess knowledge in either Ruby or Python.

Must be able to use Linux without any assistance.

Must be familiar with standard penetration testing tools (e.g. Nmap, Metasploit, etc.).

Ability to adapt and learn new creative ways to solve inefficiencies through automation.

Understanding of networking protocols and terminology.

Passion for developing new tools and scripts to solve problems.

Excellent teamwork and collaboration skills.

Primarily focus on network penetration testing.

About Vonahi Security

At Vonahi Security, we work with organizations of all sizes to deliver real business value by:

Validating security vulnerabilities with the industry’s golden standard: network penetration testing.

Making offensive security more affordable with automation
Offering internal and external network penetration testing on a continuous basis without all the headaches, just a few clicks.

Join the Kaseya growth rocket ship and see how we are #ChangingLives !

","hiringOrganization":{"@type":"Organization","name":"Kaseya","sameAs":"https://www.kaseya.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Norwalk, Connecticut, United States","addressCountry":"United States","addressRegion":"North America"}}}},{"@type":"ListItem","position":18,"item":{"@type":"JobPosting","title":"Senior Penetration Tester","datePosted":"2025-08-05","description":"

Why Join?

We're pushing the boundaries of technology with automation.

Our entire company is 100% remote.

Focus on expanding your knowledge and skills.

Our company culture is all about teamwork, innovation, and helping each other.

Flexible working hours, although US business hours are preferred.

Primary Responsibilities

Stay updated with the latest and greatest security vulnerabilities and available exploits to incorporate into the platform.

Document and streamline development best practices and initiatives.
Collaborate with the penetration testing team on new tools and strategies for expanding the framework.

Qualifications

Must be comfortable performing post-exploitation in Active Directory and enterprise environments with no assistance.

Must possess and demonstrate experience with in a language such as Ruby and/or Python.object-oriented programming (OOP).

Experience with MVC frameworks, especially Ruby on Rails, is a huge plus.

Must possess knowledge in either Ruby or Python.

Must be able to use Linux without any assistance.

Must be familiar with standard penetration testing tools (e.g. Nmap, Metasploit, etc.).

Ability to adapt and learn new creative ways to solve inefficiencies through automation.

Understanding of networking protocols and terminology.

Passion for developing new tools and scripts to solve problems.

Excellent teamwork and collaboration skills.

Primarily focus on network penetration testing.

About Vonahi Security

At Vonahi Security, we work with organizations of all sizes to deliver real business value by:

Validating security vulnerabilities with the industry’s golden standard: network penetration testing.

Making offensive security more affordable with automation
Offering internal and external network penetration testing on a continuous basis without all the headaches, just a few clicks.

Join the Kaseya growth rocket ship and see how we are #ChangingLives !

","hiringOrganization":{"@type":"Organization","name":"Kaseya","sameAs":"https://www.kaseya.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Miami, Florida, United States","addressCountry":"United States","addressRegion":"North America"}}}},{"@type":"ListItem","position":19,"item":{"@type":"JobPosting","title":"Senior Penetration Tester","datePosted":"2025-08-04","description":"

Spektrum have a wide range of exciting opportunities in several global locations.

We are always looking to add great new talent to our team and look forward to hearing from you.

Spektrum supports apex purchasers (NATO, UN, EU, and National Government and Defence) and their Tier 1 supplier ecosystem with a wide range of specialist services. We provide our clients with professional services, specialised aerospace and defence sales, delivery, and operational subject matter expertise. We are looking for personnel to join our team and support key client projects.

\n\n

Who we are supporting

The NATO Communication and Information Agency (NCIA) is responsible for providing secure and effective communications and information technology (IT) services to NATO's member countries and its partners. The agency was established in 2012 and is headquartered in Brussels, Belgium.

The NCIA provides a wide range of services, including:

Cyber Security: The NCIA provides advanced cybersecurity solutions to protect NATO's communication networks and information systems against cyber threats.
Command and Control Systems: The NCIA develops and maintains the systems used by NATO's military commanders to plan and execute operations.
Satellite Communications: The NCIA provides satellite communications services to enable secure and reliable communications between NATO forces.
Electronic Warfare: The NCIA provides electronic warfare services to support NATO's mission to detect, deny, and defeat threats to its communication networks.
Information Management: The NCIA manages NATO's information technology infrastructure, including its databases, applications, and servers.

Overall, the NCIA plays a critical role in ensuring the security and effectiveness of NATO's communication and information technology capabilities.

The program

Assistance and Advisory Service (AAS)

The NATO Communications and Information Agency (NCI Agency) is NATO’s principal C3 capability deliverer and CIS service provider. It provides, maintains and defends the NATO enterprise-wide information technology infrastructure to enable Allies to consult together under Article IV, and, when required, stand together in the face of attack under Article V.

To provide these critical services, in the modern evolving dynamic environment the NCI Agency needs to build and maintain high performance-engaged workforce. The NCI Agency workforce strategically consists of three major categorise's: NATO International Civilians (NIC)'s, Military (Mil), and Interim Workforce Consultants (IWC)'s. The IWCs are a critical part of the overall NCI Agency workforce and make up approximately 15 percent of the total workforce.

\n\n

Role ID – 2025-0204

Role Background

To support the NCSC with the execution of tasks identified in the subject work package of the service, the NCI Agency is looking for experienced penetration testing professionals to augment the existing teams in order to respond to the increasing demand for high quality security assessments and expertise.

This contract is to provide consistent support on a deliverable-based (completion-type) contract, to NCSC contributing to its POW based on the deliverables that are described in the scope of work below.

Role Duties and Responsibilities

Provide Web, infrastructure and application level penetration testing, including but not limited to COTS software and NOTS/GOTS software (NATO/Government off the Shelf), following clearly defined methodologies.
Participate in kick-off meetings with stakeholders and technical points of contact in order to identify requirements for testing.
Follow the documented procedures and workflows outlined by the technical leads
Attend team meetings if required
Write technical reports in fluent English, following defined templates and Reporting Tools.
Brief at both executive and technical levels on security reports and testing outcome, including at flag officer level.
In case of new vulnerabilities detected for COTS software, follow the Responsible Disclosure Process and follow-up with vendors and stakeholders.
Provide security design reviews to ensure compliance with NATO policies and directives.
In co-ordination with the Technical Lead of the Penetration testing team, ensure proactive collaboration and coordination with internal and external stakeholders.
Stay abreast of technological developments relevant to the area of work.
Perform any other duties as may be required.

Essential Skills, Experience and Certifications

Web application penetration testing
IT infrastructure penetration testing
Network security architecture design
Assessing security vulnerabilities within OS, software, protocols & networks
Researching and evaluating security products & technologies
Knowledge in system and network administration of UNIX and Windows systems
Use of penetration testing tools, techniques, and recognized testing methodologies
Scripting skills in at least one of the following: Python, Go, PowerShell, shell (bash, sh, csh)
Technical knowledge in system and network security, authentication and security protocols, cryptography, application security, as well as, malware infection techniques and protection technologies.
Ability to evaluate risks and formulate mitigation plans.
Proven ability to brief at executive level on security findings, reports and testing outcome.
Proven ability to write clear and structured technical reports including executive summary, technical findings and remediation plan for several different audiences.

Desirable Skills, Experience and Certifications

Professional qualifications: OSCP, OSCE, OSWE, GPEN, CREST Certified Web Application
Tester, GXPN, GWAPT or equivalent
Familiarity with risk analysis methodologies.
Prior experience of working in an international environment comprising both military and civilian elements.
Knowledge of NATO organization, internal structure and resultant relationships.

Language

A thorough knowledge of one of the two NATO languages, both written and spoken, is essential and some knowledge of the other is desirable.

Working Location

Mons, Belgium

Working Policy

Onsite

Travel

Some travel to other NATO sites may be required

Security Clearance

Valid National or NATO Secret personal security clearance

We never know what new opportunities might be just over the horizon. If this opportunity isn't for you please feel free to send us your resume anyway and be the first to know if something suitable for your skills and experience comes up.

","hiringOrganization":{"@type":"Organization","name":"Spektrum","sameAs":"https://spektrum-group.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Mons, Belgium","addressCountry":"Belgium","addressRegion":"Europe"}}}},{"@type":"ListItem","position":20,"item":{"@type":"JobPosting","title":"Penetration Tester 3","datePosted":"2025-08-03","description":"About ARSIEM Corporation
At ARSIEM Corporation we are committed to fostering a proven and trusted partnership with our government clients. We provide support to multiple agencies across the United States Government. ARSIEM has an experienced workforce of qualified professionals committed to providing the best possible support.
As demand increases, ARSIEM continues to provide reliable and cutting-edge technical solutions at the best value to our clients. That means a career packed with opportunities to grow and the ability to have an impact on every client you work with.
ARSIEM seeks a Penetration Tester 3. This position will support one of our government clients in Annapolis Junction, MD.\n

Responsibilities

Serve as a Subject Matter Expert, providing testing expertise of the Risk Management Framework.
Direct and participate in the testing phase of security control assessments using specialized knowledge of network protocols, operating systems, architectures, equipment, services, and standards.

Minimum Qualifications

Eight (8) experience of related work experience as a Penetration Tester performing network and application-level testing using established test protocols and methods.
A bachelor's degree in Computer Science or Information Technology Engineering.
Four (4) additional years of Penetration Testing experience may be substituted for a bachelor's degree.
Required Certifications (one or more): CASP+ CE, CCNP Security, CISA, CISSP (or Associate), GCED, GCIH, CCSP

Required Capabilities

Perform vulnerability and penetration testing using a wide variety of tools
Research and evaluate emerging technologies relevant to information systems security; interpret agency-specific and federal security regulations
Perform both network and application-level testing using established testing protocols and methods.

Clearance Requirement: This position requires an active TS/SCI with a polygraph. You must be a US Citizen for consideration. Candidate Referral: Do you know someone who would be GREAT at this role? If you do, ARSIEM has a way for you to earn a bonus through our referral program for persons presenting NEW (not in our resume database) candidates who are successfully placed on one of our projects. The bonus for this position is $5,000, and the referrer is eligible to receive the sum for any applicant we can place within 12 months of referral. The bonus is paid after the referred employee reaches six months of employment.
ARSIEM is proud to be an Equal Opportunity and Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status, age, or any other federally protected class.","hiringOrganization":{"@type":"Organization","name":"ARSIEM","sameAs":"https://www.arsiem.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Annapolis Junction, MD","addressCountry":"United States","addressRegion":"North America"}}}},{"@type":"ListItem","position":21,"item":{"@type":"JobPosting","title":"Junior Penetration Tester","datePosted":"2025-08-08","description":"

Join NN Digital Hub as Junior Penetration Tester!

Who we are and what we do
The Cyber Testing Center (CTC) is an international team of security professionals and ethical hackers who thrive on discovering how things work - and how they can be made safer. Every day we put web, mobile applications and infrastructure under the microscope, while also delivering hands-on training and workshops for our internal customers.

As cyber-threats evolve, so do we. To keep NN’s digital landscape secure, we’re searching for a Junior Penetration Tester to join our team. In this role you’ll hunt for vulnerabilities, champion secure-by-design practices across all NN countries, establish testing standards, share cutting-edge tools, and teach development teams how to build resilient applications. Hop on, grow with us, and help safeguard the digital world for millions of NN users.

The tasks you will perform

Execute penetration testing of applications and infrastructure

Support security activities in the application lifecycle.

Play with and enhance static & dynamic testing tools.

Share with developers and other colleagues what you discover.

Help with the growth of our penetration-testing service.

Validate reports from responsible disclosure program.

Do research, build cool tools, and level up NN’s security.

The knowledge and experience you bring

Relevant tech degree or some experience in security and development

Fluent English

Know-how in web, mobile or network security and penetration testing in general

Curiosity and motivation to learn new skills fast

Solid communication skills – you can explain nerdy stuff clearly

Comfortable reading code and using pentest tools

We’ll like you even more if you have

Experience programming and developing web apps (.NET, Java, PEGA, Python, shell scripting, Objective-C, …)

Background in penetration testing, CTF/Bug Bounty, or secure coding

IT admin chops (Unix, Windows, network... )

Passion for learning new pentesting techniques

Beyond the Paycheck: 

We work mostly from home, but we’d like to meet you in the office from time-to-time. Once a month we usually meet as a team after work. We also provide a monthly contribution to your HO expenses

5 weeks off, 5 well-being days, extra family leave, and a volunteer day.

Meal allowance, CZK 20 000 Cafeteria budget, Multisport card, pension top-ups, cheaper life insurance.

Support of education, paid certificates and conferences to boost your pentesting knowledge.

Up to CZK 60 000 for bringing a friend on board.

Laptop + iPhone with O2 plan and data – all yours for work.

How we hire
Our selection process is not just about talking, we'd like to gain a clear picture of your skills, experience, and way of thinking. That's why our selection process has three stages:

Skills assessment: to showcase your abilities, you’ll receive a small application for pentest on which you will write a report.

Technical interview: you’ll discuss your knowledge and broader expertise with the Team Lead and one of your future teammates.

Final interview: you’ll meet with the Product Owner, Team Lead, and HR for the concluding conversation

","hiringOrganization":{"@type":"Organization","name":"NN Group","sameAs":"https://www.nn-group.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Digital Hub Prague, Czechia","addressCountry":"Czechia","addressRegion":"Europe"}}}},{"@type":"ListItem","position":22,"item":{"@type":"JobPosting","title":"Senior Penetration Tester","datePosted":"2025-08-19","description":"

Description

Deloitte Cyber Center in Israel is seeking a talented Senior Penetration Tester to join our team. In this role, you will be responsible for conducting comprehensive penetration tests across Active Directory environments, web applications, mobile applications, API’s, Physical and Cloud environments, with a strong emphasis on cyber security. You will be expected to identify, exploit, and assess vulnerabilities, produce high-quality reports, and present findings to clients in a clear and concise manner.

This position requires both strong technical expertise and the ability to work effectively in a consulting environment, leading end-to-end penetration testing projects while collaborating with team members and global clients.

Key Responsibilities:

Perform penetration testing of Active Directory environments, web applications, mobile applications, API’s, Physical and Cloud environments.
Identify, exploit, and document vulnerabilities, including bypassing security controls where applicable.
Write technical and managerial reports in English, including actionable recommendations.
Lead and manage penetration testing projects, including scoping, delivery, reporting, and client presentations.
Stay updated with the latest tools, countermeasures, threats, and attack techniques.

Share knowledge with colleagues and contribute to a collaborative team environment.

Requirements

Minimum 3 years of proven experience in penetration testing.
Strong knowledge of enterprise networks, communication protocols, and Active Directory.
Good knowledge of The OWASP Top 10 Web Application and OWASP API Top 10.
Proficiency in scripting languages such as Python, PowerShell, or similar.
Experience with tools such as Burp Suite and Postman.
High-level English proficiency (written and spoken).
Proven experience writing clear, professional reports in English.
Ability to work both independently and as part of a team.
Strong research skills and ability to learn new technologies quickly.

Advantages

Experience with cloud penetration testing (AWS, Azure, GCP).
Experience in bypassing security products and advanced attack techniques.
Background in Blue Team / defensive security environments.
Previous consulting experience with global clients.
Certifications such as OSCP, OSEP, OSWE, BSCP, CWEE, CRTP, CRTE, or similar.
Experience with Code Review and Whitebox PT.
Experience with Physical PT.

At Deloitte, we believe that an inclusive mindset and diverse workforce are two of our greatest strengths. We foster an environment where creativity, collaboration, and innovation are encouraged, and where every individual feels valued and respected.

If you are a passionate penetration tester looking to make an impact and grow in a dynamic global team, we encourage you to apply.

Full time Job Location: Tel Aviv, Hybrid

We at Deloitte believe that diversity and inclusion among our people is a critical component of our success and that is why we cultivate an organizational culture that contains and embraces diversity in all its forms.

Description Hebrew

\nNone\n

Requirements Hebrew

Application PT

","hiringOrganization":{"@type":"Organization","name":"Deloitte","sameAs":"https://www2.deloitte.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Tel Aviv, Tel Aviv District, IL","addressCountry":"Israel","addressRegion":"Middle East"}}}},{"@type":"ListItem","position":23,"item":{"@type":"JobPosting","title":"Cyber Security (Penetration Tester)","datePosted":"2025-07-02","description":"

Cyber Security (Penetration Tester)

Department: Data Analysis and Technology Services

Employment Type: Full Time

Location: Northern Virginia

Description

Are you ready to lead projects that protect and secure digital assets? Ardent Principles is searching for a full-time Cyber Security Penetration Tester to enhance our security initiatives onsite, full-time in Northern Virginia.

If you're passionate about cyber security, thrive on managing impactful projects, and are ready to make a difference, this is the role for you. With a competitive salary and industry-leading benefits, Ardent Principles offers more than just a job - we offer a career path filled with growth and opportunities. Join us and let's shape the future together!

\n\nWho We Are:
We offer advanced services in data science, data engineering, software engineering, AI solutions, cybersecurity, staff augmentation, and IT program management.

\n\nPassionate Integrity, Driven by Excellence
\"Ardent Principles\" signifies our unwavering commitment to excellence, driven by a profound passion and a strict adherence to ethical values. We believe that happy employees make for happy clients. Our mission is to act as a bridge between satisfied clients and fulfilled employees, ensuring that your job and well-being are our top priorities because your satisfaction leads to the success of our clients.

Key Responsibilities

\nREQUIRED: Active TS/SCI with Full Scope Polygraph

In this challenging yet rewarding role as a Penetration Tester, you are an integral part of what brings our Company's mission to life. You should have the following required skills, certifications and demonstrated experience in and/or with:

Cyber security or related IT field
Cyber penetration testing
Applying computer attack methods and system exploitation techniques
Working knowledge of cyber security principles for Linux, Windows, and virtual platforms
Designing, testing, or implementing IT security architecture
Performing network security analysis
Analyzing network architectures
Using network management tools
Developing risk management methodologies
Analyzing test results to develop risk and threat mitigation plans
Testing or reviewing system configuration, development, and design specifically around enterprise systems and hypervisors
Designing, testing, or implementing complex Windows installations

Highly Desired Qualifications

Other skills and demonstrated experiences that are highly desired but not mandatory to perform the work, include:

Participating in public and private information security groups and organizations
Communicating vulnerability results and risk posture to senior executives
Oracle Cloud Computing
Researching, evaluating, and developing security policies and guidance
Performing complex technical tasks with minimal direction
Bachelor's degree in Computer Science, Information Systems, Engineering, or other related scientific or technical discipline.
One or more of the relevant certifications:
o Certified Ethical Hacker (CEH)
o Offensive Security Certified Professional (OSCP)
o Global Information Assurance Certified Penetration Tester (GPEN)

What We Offer You

\nHighly Competitive Salary: Recognizing and rewarding your expertise and contributions.
\nGenerous Paid Time Off: Providing ample time for rest, relaxation, and personal pursuits.
\nDedicated Training Budget: Supporting continuous learning and professional development.
\n100% Employer-Covered Family Vision, Dental, and Health Insurance: Ensuring comprehensive health coverage for you and your family.
\n100% Employer-Covered Life and Disability Insurance: Offering financial security and peace of mind.
\n401(k) Plan with a 6% Employer Match: Helping you plan and save for a secure retirement, with 100% vesting from day one.
\n11 Paid Government Holidays: Observing national holidays to ensure time off with family and friends.
\nSpot Bonuses for Exceptional Performance: Rewarding outstanding contributions and achievements.

SCHEDULE:This is a full-time position with consultants expected to be available and working onsite in Northern Virginia during core hours.

\nReady to take the next step in your career? Join us and be part of a team dedicated to driving positive change through technology. Apply now with our easy 3-minute, mobile-friendly initial application process. Your future starts here!","hiringOrganization":{"@type":"Organization","name":"Ardent Principles, Inc","sameAs":"https://www.ardentprinciples.com"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Northern Virginia","addressCountry":"United States","addressRegion":"North America"}}}},{"@type":"ListItem","position":24,"item":{"@type":"JobPosting","title":"Senior Penetration Tester-Security","datePosted":"2025-08-07","description":"

HARMAN’s engineers and designers are creative, purposeful and agile. As part of this team, you’ll combine your technical expertise with innovative ideas to help drive cutting-edge solutions in the car, enterprise and connected ecosystem. Every day, you will push the boundaries of creative design, and HARMAN is committed to providing you with the opportunities, innovative technologies and resources to build a successful career.

A Career at HARMAN

As a technology leader that is rapidly on the move, HARMAN is filled with people who are focused on making life better. Innovation, inclusivity and teamwork are a part of our DNA. When you add that to the challenges we take on and solve together, you’ll discover that at HARMAN you can grow, make a difference and be proud of the work you do everyday.

Job Description:

Introduction: A Career at HARMAN Digital Transformation Solutions (DTS)

We’re a global, multi-disciplinary team that’s putting the innovative power of technology to work and transforming tomorrow. At HARMAN DTS, you solve challenges by creating innovative solutions.

Combine the physical and digital, making technology a more dynamic force to solve challenges and serve humanity’s needs
Work at the convergence of cross channel UX, cloud, insightful data, IoT and mobility
Empower companies to create new digital business models, enter new markets, and improve customer experience.

About the Role-

Senior Penetration Tester with deep expertise in application security. The ideal candidate will be responsible for planning, executing, and documenting comprehensive penetration tests, including advanced manual testing techniques and contribute to strengthening our security posture by recommending practical solution principles and secure coding practices.

What You Will Do

Conduct comprehensive penetration tests on web/mobile/cloud applications, firmware, and hardware devices.
Perform manual security testing beyond automated tools to uncover complex vulnerabilities.
Analize systems and architecture to identify security risks and attack surfaces.
Use industry-standard tools such as Metasploit, Burp Suite, Nmap, Wireshark, Nessus, and custom scripts for exploitation and reconnaissance.
Simulate real-world attack scenarios to evaluate system resilience.
Develop and present detailed reports with proof-of-concept (PoC), risk assessments, and remediation guidance.
Collaborate with development and DevOps teams to suggest secure coding practices and fix vulnerabilities at the root.
Stay up to date with emerging threats, vulnerabilities, and industry trends.

What You Need

8–10 years of hands-on experience in penetration testing (application and hardware).
Strong knowledge of OWASP Top 10, SANS 25, and common vulnerability patterns.
Deep familiarity with exploit frameworks (e.g., Metasploit), reverse engineering, and hardware-level attack techniques (e.g., JTAG, UART, SPI).
Experience analyzing and testing embedded systems, IoT devices, and network appliances.
Ability to explain vulnerabilities to non-security stakeholders with clarity.
Proven experience in crafting custom exploits or payloads.
Solid understanding of secure development lifecycle (SDLC) and CI/CD pipeline integration.
Certifications like OSCP, OSCE, GPEN, or similar are a strong plus.

What is Nice to Have

Knowledge of containerized environments.
Familiarity with secure boot, firmware integrity, and hardware encryption modules.
Contribution to bug bounty platforms or CVE submissions.

What Makes You Eligible

Any offer of employment is conditioned upon the successful completion of a background investigation and drug screen.
Dedicated performer & team player with the ability to advocate appropriately for product quality.
Relentless learner with a dedication to learn new technologies and test methods
Self-driven and Innovative to drive continuous improvements in Test process
Resourcefulness in triaging problems and coordinating with multiple teams for issue resolution
Strong written, verbal communication and inter personal relationship skills

You Belong Here

HARMAN is committed to making every employee feel welcomed, valued, and empowered. No matter what role you play, we encourage you to share your ideas, voice your distinct perspective, and bring your whole self with you – all within a support-minded culture that celebrates what makes each of us unique. We also recognize that learning is a lifelong pursuit and want you to flourish. We proudly offer added opportunities for training, development, and continuing education, further empowering you to live the career you want.

About HARMAN: Where Innovation Unleashes Next-Level Technology

Ever since the 1920s, we’ve been amplifying the sense of sound. Today, that legacy endures, with integrated technology platforms that make the world smarter, safer, and more connected.

Across automotive, lifestyle, and digital transformation solutions, we create innovative technologies that turn ordinary moments into extraordinary experiences. Our renowned automotive and lifestyle solutions can be found everywhere, from the music we play in our cars and homes to venues that feature today’s most sought-after performers, while our digital transformation solutions serve humanity by addressing the world’s ever-evolving needs and demands. Marketing our award-winning portfolio under 16 iconic brands, such as JBL, Mark Levinson, and Revel, we set ourselves apart by exceeding the highest engineering and design standards for our customers, our partners and each other.

HARMAN is proud to be an Equal Opportunity / Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics.

","hiringOrganization":{"@type":"Organization","name":"HARMAN International","sameAs":"https://www.harman.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"IN Gurgaon Bldg # 10 DLF Cyber City HCS, India","addressCountry":"India","addressRegion":"Asia/Pacific"}}}},{"@type":"ListItem","position":25,"item":{"@type":"JobPosting","title":"Jr Cyber Penetration Tester","datePosted":"2025-08-05","description":"

Responsibilities

Peraton is currently seeking a Jr Cyber Penetration Tester to become part of our Department of State (DOS) Diplomatic Security Cyber Mission (DSCM) program.

Location: Rosslyn, VA. Situational Telework. Must be local to the job site.

The DSCM program encompasses technical, engineering, data analytics, cyber security, management, operational, logistical and administrative support to aid and advise the DoS Cyber & Technology Security (CTS) Directorate. This includes protecting a global cyber infrastructure comprising networks, systems, information, and mobile devices all while identifying and responding to cyber risks and threats.

In this role, you will:

Support the Penetration Testing (Red Cell) Team.
Assess the current state of the customer’s system security by identifying all vulnerabilities and security measures.
Help customer perform analysis and mitigation of security vulnerabilities.
Perform and report on penetration testing of systems, including cloud, to satisfy the NIST 800-53 CA-8 security control and using methodologies that may include, NIST SP 800-115, Penetration Testing Execution Standard (PTES), and Information Systems Security Assessment Framework (ISSAF).
Stay abreast of current attack vectors and unique methods for exploitation of computer networks.
Provide support to incident response teams through capability enhancement and reporting.
Assist in maintaining Red Cell infrastructure.
Develop or modify tools that automate discovery or exploitation (e.g. bash, Python, JavaScript, PowerShell).

Join Our Mission:

At Peraton, you’ll be part of a team that’s making a real difference. We are committed to creating solutions that empower the U.S. Intelligence Community and our national defense partners to succeed in their mission to protect America. We offer a culture that fosters innovation, collaboration, and continuous learning, with opportunities for career growth in one of the most dynamic fields in the industry.

If you’re ready to be challenged, make an impact, and grow your career while supporting the nation’s defense, apply today!

#DSCM

Qualifications

Required:

Bachelor's degree and 1 year of related experience. \n
- An additional 4 years may be considered in lieu of the degree requirement.
Basic understanding of networking and security principles.
Experience with evaluating system security configurations.
Understand common Web Application vulnerabilities like SQLi, XSS, CSRF, and HTTP Flooding.
Experience with penetration testing tools such as Metasploit, Burp Suite, Nmap, etc.
Fundamentals of network routing & switching and assessing network device configurations.
Familiarity in evaluating findings and performing root cause analysis.
Demonstrated ability to work alone and/or within a small group.
Must process and maintain ONE of the listed certifications below: \n
- CCNA Cyber Ops, CCNA-Security, CEH, CFR, Cloud+, CySA+, GCIA, GCIH, GICSP, or SCYBER
U.S. citizenship required.
Ability to obtain Secret security clearance.

Preferred:

Active Top Secret or TS/SCI.

Peraton Overview

Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world’s leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees do the can’t be done by solving the most daunting challenges facing our customers. Visit peraton.com to learn how we’re keeping people around the world safe and secure.

Target Salary Range

$66,000 - $106,000. This represents the typical salary range for this position based on experience and other factors.\n

EEO

EEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.","hiringOrganization":{"@type":"Organization","name":"Peraton","sameAs":"https://www.peraton.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Arlington, VA, United States","addressCountry":"United States","addressRegion":"North America"}}}},{"@type":"ListItem","position":26,"item":{"@type":"JobPosting","title":"Senior Cyber Penetration Tester","datePosted":"2025-08-04","description":"

Spektrum have a wide range of exciting opportunities in several global locations.

We are always looking to add great new talent to our team and look forward to hearing from you.

\n\n

Who we are supporting

The NCIA provides a wide range of services, including:

Cyber Security: The NCIA provides advanced cybersecurity solutions to protect NATO's communication networks and information systems against cyber threats.
Command and Control Systems: The NCIA develops and maintains the systems used by NATO's military commanders to plan and execute operations.
Satellite Communications: The NCIA provides satellite communications services to enable secure and reliable communications between NATO forces.
Electronic Warfare: The NCIA provides electronic warfare services to support NATO's mission to detect, deny, and defeat threats to its communication networks.
Information Management: The NCIA manages NATO's information technology infrastructure, including its databases, applications, and servers.

Overall, the NCIA plays a critical role in ensuring the security and effectiveness of NATO's communication and information technology capabilities.

The program

Assistance and Advisory Service (AAS)

\n\n

Role ID – 2025-0203

Role Background

Role Duties and Responsibilities

Provide Web, infrastructure and application level penetration testing, including but not limited to COTS software and NOTS/GOTS software (NATO/Government off the Shelf), following clearly defined methodologies.
Participate in kick-off meetings with stakeholders and technical points of contact in order to identify requirements for testing.
Follow the documented procedures and workflows outlined by the technical leads
Attend team meetings if required
Write technical reports in fluent English, following defined templates and Reporting Tools.
Brief at both executive and technical levels on security reports and testing outcome, including at flag officer level.
In case of new vulnerabilities detected for COTS software, follow the Responsible Disclosure Process and follow-up with vendors and stakeholders.
Provide security design reviews to ensure compliance with NATO policies and directives.
In co-ordination with the Technical Lead of the Penetration testing team, ensure proactive collaboration and coordination with internal and external stakeholders.
Stay abreast of technological developments relevant to the area of work.
Perform any other duties as may be required.

Essential Skills, Experience and Certifications

Web application penetration testing
IT infrastructure penetration testing
Network security architecture design
Assessing security vulnerabilities within OS, software, protocols & networks
Researching and evaluating security products & technologies
Knowledge in system and network administration of UNIX and Windows systems
Use of penetration testing tools, techniques, and recognized testing methodologies
Scripting skills in at least one of the following: Python, Go, PowerShell, shell (bash, ksh, csh)
Technical knowledge in system and network security, authentication and security protocols, cryptography, application security, as well as, malware infection techniques and protection technologies.
Ability to evaluate risks and formulate mitigation plans.
Proven ability to brief at executive level on security findings, reports and testing outcome.
Proven ability to write clear and structured technical reports including executive summary, technical findings and remediation plan for several different audiences.
Prior experience of working in an international environment comprising both military and civilian elements.
Knowledge of NATO organization, internal structure and resultant relationships.

Desirable Skills, Experience and Certifications

Professional qualifications: OSCP, OSCE, OSWE, GPEN, CREST Certified Web Application Tester, GXPN, GWAPT or equivalent
Familiarity with risk analysis methodologies.
Prior experience of working in an international environment comprising both military and civilian elements.
Knowledge of NATO organization, internal structure and resultant relationships.

Language

A thorough knowledge of one of the two NATO languages, both written and spoken, is essential and some knowledge of the other is desirable.

Working Location

Mons, Belgium

Working Policy

100% onsite

Travel

Some travel to other NATO sites may be required

Security Clearance

Valid National or NATO Secret personal security clearance

Conduct Penetration Tests: Perform comprehensive penetration testing on AI models, APIs, cloud infrastructures, and associated systems to uncover security weaknesses.
AI-Specific Threat Analysis: Identify and assess vulnerabilities unique to AI systems, including model inversion, data poisoning, and adversarial attacks.
Tool Development: Create and maintain custom scripts and tools to automate testing processes and improve efficiency.
Reporting: Document findings in detailed reports, providing actionable recommendations to mitigate identified risks.
Collaboration: Work closely with development, data science, and DevOps teams to integrate security best practices throughout the AI product lifecycle.
Stay Updated: Keep abreast of the latest cybersecurity threats, penetration testing techniques, and AI security research.

\n\n\n\n\n

\n\n\n\n\nEssential Skills\n\n\nJob \n\n\n\n

Penetration Testing Tools: Proficiency with tools like Kali Linux, Burp Suite, Metasploit, Nmap, and Wireshark.
Programming and Scripting: Strong skills in Python, Bash, or PowerShell for automating tasks and developing custom testing tools.
Networking and Protocols: In-depth understanding of TCP/IP, DNS, HTTP/HTTPS, and other networking protocols.
Operating Systems: Experience with Windows, Linux, and macOS environments.
Cloud Security: Familiarity with cloud platforms (e.g., AWS, Azure, GCP) and their security configurations.
AI and Machine Learning: Basic understanding of machine learning frameworks (e.g., TensorFlow, PyTorch) and AI model architectures.

\n\n\nPersonal \n\n\n\n

Demonstrated ability to assess complex systems and identify potential vulnerabilities.
Creative approach to overcoming obstacles and finding effective solutions.
Strong verbal and written communication skills to convey findings to technical and non-technical stakeholders.
Commitment to ethical hacking practices and adherence to legal standards.
Willingness to learn and adapt to evolving cybersecurity landscapes.

\n\n\n\n\n

\n\n\n\n\nPreferred Skills\n\n\nJob\n\n\n\n

Advanced Threat Analysis: Experience in identifying and mitigating sophisticated cyber threats.
Social Engineering: Knowledge of social engineering tactics and their application in penetration testing.
Security Frameworks: Familiarity with OWASP, NIST, and ISO/IEC 27001 standards.
Secure Coding Practices: Understanding of secure coding standards and the ability to perform code reviews.

\n\n\nPersonal \n\n\n\n

Experience in leading security projects or mentoring junior team members.
Ability to work effectively in multidisciplinary teams.
Proactive in acquiring new knowledge and staying updated with industry trends.

\n\n\n\n\n

\n\n\n\n\nOther Relevant Information\n\n\n\n

Master’s or Bachelor’s in Engineering with specialization in Computer Science or Artificial Intelligence or Information Technology or a related field.
Demonstrated expertise with a minimum of four years in relevant roles.
This role offers the flexibility of working remotely in India.

\n\n\n\n\n

LeewayHertz is an equal opportunity employer and does not discriminate based on race, color, religion, sex, age, disability, national origin, sexual orientation, gender identity, or any other protected status. We encourage a diverse range of applicants.

","hiringOrganization":{"@type":"Organization","name":"The Hackett Group","sameAs":"https://www.linkedin.com/company/the-hackett-group/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"India","addressCountry":"India","addressRegion":"Asia/Pacific"}}}},{"@type":"ListItem","position":28,"item":{"@type":"JobPosting","title":"Senior Cybersecurity Penetration Tester","datePosted":"2025-08-06","description":"

Job Description:

The mission of the penetration testing team is to protect Fidelity's assets and our customers’ livelihoods from the threat of exploitation by malicious adversaries.

The penetration testing team does this by proactively identifying vulnerabilities in our systems and serving as subject matter experts to enable the business units to mitigate them in a positive, collaborative, innovative manner.

Our Vision

We aspire to be a best-in-class pen test team, with fully engaged, passionate members.

Producing high-quality work in a consistent, effective, efficient, customer-oriented manner.

Providing competitive advantage to the firm and serving as a differentiator in the marketplace.

Serving as a role model for others across the Enterprise and wider industry.

And driving advancement and research in the cybersecurity space.

Fidelity has a large and diverse portfolio of products. This provides a varied and interesting role giving the team the opportunity to work on a multitude of different areas of the business.

The Expertise We’re Looking For

Bachelors degree or equivalent experience

7+ years of overall IT experience

5+ years of hands-on web application penetration testing / ethical hacking experience

Preferred:OSCP, GWAPT, GXPN, GPEN, LPT, CEH or other industry security certifications.

The Purpose of Your Role

Lead testing efforts on Fidelity's web and mobile applications and supporting systems.

Replicate the actual techniques and tools used by malicious attackers in an effort to model potential external threats.

Upon completion of the assessment, you will prepare reports and present the results to application owners, developers, and business unit information security teams.

Analyse test results, draw conclusions from results, and develop targeted exploit examples.

Consult with operations and software development teams to ensure potential weaknesses are addressed.

Contribute to the research or development of tools to assist in the vulnerability discovery process.

Collaborate with other teams within Enterprise Cybersecurity to improve the overall security of Fidelity's applications and infrastructure.

Stay current on security best practices and vulnerabilities.

The Skills You Bring

Ability to demonstrate manual testing experience including all OWASP Top 10 categories

Intermediate knowledge of application security mechanisms such as authentication and authorization techniques, data validation, and the proper use of encryption

Technical knowledge of, and the ability to recognize, various types of application security vulnerabilities

Demonstrated experience with common penetration testing and vulnerability assessment tools such as Burp Suite Professional, nmap, Wireshark, Nessus, NeXpose, Kali, Metasploit, AppScan, WebInspect, Acunetix, Arachni, w3af, NTOSpider etc.

Intermediate knowledge of a programming or scripting language such as C, C#, Python, Objective C, Java, Javascript, SQL,

Intermediate knowledge of Web Services technologies such as XML, JSON, SOAP, REST, and AJAX

Intermediate knowledge of web frameworks, including XML, SOAP, J2EE, JSON and Ajax

Experience with Enterprise Java or .NET web application frameworks, including Struts and Spring

Proven analytical and problem-solving skills, as well as the desire to assist others in solving issues

Excellent interpersonal skills with a strong interest in the application security domain

Excellent communication and presentation skills and a proven ability to communicate threats and facilitate progress towards long-term remediation

Highly motivated with the willingness to take ownership / responsibility for their work and the ability to work alone or as part of a team.

The Value You Deliver

Fidelity provides key financial services to a wide variety of demographics. In many instances we are managing our customers financial future and savings. This is something we take very seriously. Protecting our customers and their data is of paramount importance to us. This role plays a key part in helping to protect the livelihoods of our customers around the world and plays a significant part in preventing real-world cyber attacks.

How Your Work Impacts the Organization

The Penetration Testing team forms part of Security Assessment group within Enterprise Cybersecurity (ECS). The goal of the Security Assessment group is to proactively identify and remediate vulnerabilities in Fidelity’s applications and infrastructure. We work very closely with all of the key Business Units to ensure that they remain secure while they deliver key projects to advance the firm.

#Cyber

Category:

Information Technology","hiringOrganization":{"@type":"Organization","name":"Fidelity Investments","sameAs":"https://www.fidelity.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"1 Waterside, Kingswood Ave, Dublin Ireland","addressCountry":"Ireland","addressRegion":"Europe"}}}},{"@type":"ListItem","position":29,"item":{"@type":"JobPosting","title":"Security Engineer - Penetration Tester","datePosted":"2025-08-10","description":"

Job Overview

We are looking for smart, talented, and self-motivated cyber security professionals to join our fast-growing

Security Operations team at Axiata. As an Offensive security engineer, you will be working with companies

across Southeast Asia to solve security challenges at scale and speed. If you are passionate about all things

cyber security and looking for an exciting every day, then this role is for you!

Responsibilities and Duties

Perform manual penetration tests of websites, services, infrastructure, and networks to discover and
exploit vulnerabilities
Clearly document and communicate findings and remediation recommendations to the
application/service owners
Liaise with internal stakeholders to ensure timely delivery of security assessments
Perform regular VA/PT of web, mobile and desktop applications
Identify the internet exposure of our operating companies and constantly evaluate the security posture
Document vulnerabilities, impact, and recommendations in a systematic manner
Take on security challenges, take ownership of them and drive them to completion

Qualifications

3+ years of experience performing vulnerability assessments and penetration testing on
Web/Mobile/Desktop applications
Excellent understanding of OWASP Top 10 vulnerabilities and its mitigations
Clear understanding of networking fundamentals: OSI layers, TCP/IP, protocols, etc.
Experience working on a GNU/Linux based penetration testing operating system and the command line
(such as Kali Linux, Parrot, BlackArch, etc.)
Experience with automation scripting and fluent in at least one programming/scripting language
Experience working on open-source and commercial tools like Burp Suite, OWASP ZAP, Nessus, etc.
Good spoken and written English skills

Bonus Points

Security certifications: OSCP, OSCE, CRTP, GIAC certs or equivalent
Knowledge of Windows penetration testing: Active Directory, Azure AD
CVE publications, knowledge of exploit development
Talks/workshops organized at security conferences
Excellent bug bounty track record
Open-source contributions made to security tools, scripts & solutions
Development background and code review capabilities
Experience with ICS/IoT penetration testing

","hiringOrganization":{"@type":"Organization","name":"Axiata Digital Labs","sameAs":"https://axiatadigitallabs.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Kuala Lumpur, Malaysia","addressCountry":"Malaysia","addressRegion":"Asia/Pacific"}}}},{"@type":"ListItem","position":30,"item":{"@type":"JobPosting","title":"Senior Penetration Tester-Security","datePosted":"2025-08-12","description":"

HARMAN’s engineers and designers are creative, purposeful and agile. As part of this team, you’ll combine your technical expertise with innovative ideas to help drive cutting-edge solutions in the car, enterprise and connected ecosystem. Every day, you will push the boundaries of creative design, and HARMAN is committed to providing you with the opportunities, innovative technologies and resources to build a successful career.

A Career at HARMAN

As a technology leader that is rapidly on the move, HARMAN is filled with people who are focused on making life better. Innovation, inclusivity and teamwork are a part of our DNA. When you add that to the challenges we take on and solve together, you’ll discover that at HARMAN you can grow, make a difference and be proud of the work you do everyday.

Job Description:

Introduction: A Career at HARMAN Digital Transformation Solutions (DTS)

We’re a global, multi-disciplinary team that’s putting the innovative power of technology to work and transforming tomorrow. At HARMAN DTS, you solve challenges by creating innovative solutions.

Combine the physical and digital, making technology a more dynamic force to solve challenges and serve humanity’s needs
Work at the convergence of cross channel UX, cloud, insightful data, IoT and mobility
Empower companies to create new digital business models, enter new markets, and improve customer experience.

About the Role-

Senior Penetration Tester with deep expertise in application security. The ideal candidate will be responsible for planning, executing, and documenting comprehensive penetration tests, including advanced manual testing techniques and contribute to strengthening our security posture by recommending practical solution principles and secure coding practices.

What You Will Do

Conduct comprehensive penetration tests on web/mobile/cloud applications, firmware, and hardware devices.
Perform manual security testing beyond automated tools to uncover complex vulnerabilities.
Analize systems and architecture to identify security risks and attack surfaces.
Use industry-standard tools such as Metasploit, Burp Suite, Nmap, Wireshark, Nessus, and custom scripts for exploitation and reconnaissance.
Simulate real-world attack scenarios to evaluate system resilience.
Develop and present detailed reports with proof-of-concept (PoC), risk assessments, and remediation guidance.
Collaborate with development and DevOps teams to suggest secure coding practices and fix vulnerabilities at the root.
Stay up to date with emerging threats, vulnerabilities, and industry trends.

What You Need

8–10 years of hands-on experience in penetration testing (application and hardware).
Strong knowledge of OWASP Top 10, SANS 25, and common vulnerability patterns.
Deep familiarity with exploit frameworks (e.g., Metasploit), reverse engineering, and hardware-level attack techniques (e.g., JTAG, UART, SPI).
Experience analyzing and testing embedded systems, IoT devices, and network appliances.
Ability to explain vulnerabilities to non-security stakeholders with clarity.
Proven experience in crafting custom exploits or payloads.
Solid understanding of secure development lifecycle (SDLC) and CI/CD pipeline integration.
Certifications like OSCP, OSCE, GPEN, or similar are a strong plus.

What is Nice to Have

Knowledge of containerized environments.
Familiarity with secure boot, firmware integrity, and hardware encryption modules.
Contribution to bug bounty platforms or CVE submissions.

What Makes You Eligible

Any offer of employment is conditioned upon the successful completion of a background investigation and drug screen.
Dedicated performer & team player with the ability to advocate appropriately for product quality.
Relentless learner with a dedication to learn new technologies and test methods
Self-driven and Innovative to drive continuous improvements in Test process
Resourcefulness in triaging problems and coordinating with multiple teams for issue resolution
Strong written, verbal communication and inter personal relationship skills

You Belong Here

HARMAN is committed to making every employee feel welcomed, valued, and empowered. No matter what role you play, we encourage you to share your ideas, voice your distinct perspective, and bring your whole self with you – all within a support-minded culture that celebrates what makes each of us unique. We also recognize that learning is a lifelong pursuit and want you to flourish. We proudly offer added opportunities for training, development, and continuing education, further empowering you to live the career you want.

About HARMAN: Where Innovation Unleashes Next-Level Technology

Ever since the 1920s, we’ve been amplifying the sense of sound. Today, that legacy endures, with integrated technology platforms that make the world smarter, safer, and more connected.

Across automotive, lifestyle, and digital transformation solutions, we create innovative technologies that turn ordinary moments into extraordinary experiences. Our renowned automotive and lifestyle solutions can be found everywhere, from the music we play in our cars and homes to venues that feature today’s most sought-after performers, while our digital transformation solutions serve humanity by addressing the world’s ever-evolving needs and demands. Marketing our award-winning portfolio under 16 iconic brands, such as JBL, Mark Levinson, and Revel, we set ourselves apart by exceeding the highest engineering and design standards for our customers, our partners and each other.

","hiringOrganization":{"@type":"Organization","name":"HARMAN International","sameAs":"https://www.harman.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"IN Gurgaon Bldg # 10 DLF Cyber City HCS, India","addressCountry":"India","addressRegion":"Asia/Pacific"}}}},{"@type":"ListItem","position":31,"item":{"@type":"JobPosting","title":"Senior Security Penetration Tester","datePosted":"2025-08-18","description":"

Location(s): Asia-Pacific & Middle East : Malaysia : Kuala Lumpur

BAE Systems Digital Intelligence is home to 4,500 digital, cyber and intelligence experts. We work collaboratively across 10 countries to collect, connect and understand complex data, so that governments, nation states, armed forces and commercial businesses can unlock digital advantage in the most demanding environments.

About Us

Our mission at BAE Systems Digital Intelligence is to collect, connect and understand complex data, so that our customers can unlock digital advantage in the most demanding environments.

At our Malaysian Global Delivery Centre, we work with clients from around the world to deliver cyber technical services to support our customers in keeping their systems secure in today’s hostile digital world.

As a Senior Penetration Tester, you will perform comprehensive penetration testing assessments across a wide range of sectors and produce comprehensive written reports to meet high industry standards. Beyond the testing itself, you will be involved in client pre-engagement processes, contributing to scoping tasks and drafting proposals.

This position is part of our global Cyber Technical Services team, which includes adjacent areas such as Threat Intelligence and SOC Consulting.

Your role will involve:

Delivery of end-to-end security testing engagements, including scoping and client wash-up meetings.

Performing a wide range of security testing types such as web application, infrastructure and objective based/red teaming.

Production of detailed reporting and presentations for both technical and non-technical stakeholders.

Safe and responsible use of testing tools, ensuring controls are in place to limit risks during customer engagements.

Developing improvements in terms of scripts, tools, or techniques to enhance the Security Testing team's capabilities.

Maintaining an up-to-date knowledge of information security issues, continuously learning about new technologies, methodologies, and techniques.

Knowledge sharing with colleagues in other teams, such as Threat Intelligence, Incident Response, and the wider Security Consulting community.

Assist and support team members in troubleshooting complex technical issues, reviewing vulnerability findings, and validating penetration test results to uphold high standards of accuracy, consistency, and reporting quality.

Role requirements

We are looking for those with a passion for cybersecurity. Those who contribute to cybersecurity related blogs, engage in vulnerability research/bug bounties or other community related events will be looked at favourably

Experience in common offensive penetration testing domains such as testing of web applications, infrastructure and red teaming. Experience with wireless and mobile testing also an advantage.

Evidenced skills through industry recognised certifications such OSCP, CREST or CRTO

Confident communicator with excellent spoken and written English communication skills

Experience using common industry tools such as Kali Linux, Nessus & Burpsuite

Desirable

Knowledge of C2 frameworks such as Cobalt Strike

Threat hunting or compromised assessment experience

What We Offer

You’ll have a dedicated line Manager to help you develop your career and guide you on your journey through BAE Systems Digital Intelligence

We will support your personal training and development in the areas of cybersecurity by sponsoring training courses and certification exams (i.e OSCP, CREST, CRTO)

Work-life balance is important; you’ll get 18 days holiday a year (increases to 21 after 5 years’ service)

We support hybrid working and give flexibility for teams to decide on the balance between remote and office-based working

Our benefits package includes private family medical cover, maternity (4 months), paternity (2 weeks), study leave & a Optical/Dental/Health screening allowance

You’ll be part of our annual bonus and share award scheme

Life at BAE Systems Digital Intelligence

We are embracing Hybrid Working. This means you and your colleagues may be working in different locations, such as from home, another BAE Systems office or client site, some or all of the time, and work might be going on at different times of the day.

By embracing technology, we can interact, collaborate and create together, even when we’re working remotely from one another. Hybrid Working allows for increased flexibility in when and where we work, helping us to balance our work and personal life more effectively, and enhance well-being.

Diversity and inclusion are integral to the success of BAE Systems Digital Intelligence. We are proud to have an organisational culture where employees with varying perspectives, skills, life experiences and backgrounds – the best and brightest minds – can work together to achieve excellence and realise individual and organisational potential.

","hiringOrganization":{"@type":"Organization","name":"BAE Systems","sameAs":"https://www.baesystems.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Kuala Lumpur, MY","addressCountry":"Malaysia","addressRegion":"Asia/Pacific"}}}},{"@type":"ListItem","position":32,"item":{"@type":"JobPosting","title":"Web Application Penetration Tester","datePosted":"2025-08-19","description":"

\n\n \n General Information\n

\n\n

\n Press space or enter keys to toggle section visibility

\n\n\n\n\n\n Company\n \n\n Deloitte\n \n\n\n\n Business Unit\n \n\n Technology & Transformation\n \n\n\n\n Primary Location\n \n\n Zaventem\n \n\n\n\n Field of interest\n \n\n Technology\n \n\n\n\n Industry Focus\n \n\n Industry Agnostic\n \n\n\n\n Recruiter\n \n\n Govaerts, Julie - jugovaerts@deloitte.com\n \n\n\n\n\n\n\n

\n\n \n Description of the position\n

\n\n

\n Press space or enter keys to toggle section visibility

\n\n\n\n\n\nCan’t wait to make an impact on the world? You’re not alone. Join us in driving progress in the working world and beyond.
\n\n\n\n\nYour journey with us

As a medior penetration tester, you’ll be responsible for delivering high-quality web application security assessments. You’ll work on a range of technical environments, supporting senior consultants, collaborating with clients, and mentoring junior colleagues. You have a solid understanding of offensive security and are passionate about identifying and exploiting vulnerabilities in complex applications.

Your key responsibilities are:

Perform manual and automated penetration tests on web applications, APIs, and related infrastructure.
Identify, exploit, and document security vulnerabilities in accordance with OWASP, NIST, and other standards.
Develop custom exploits or proof-of-concept code where applicable.
Analyze and present assessment results clearly to technical and non-technical stakeholders.
Write concise, actionable, and technically accurate reports and recommendations.
Collaborate with red team or infrastructure testing teams on hybrid assessments.
Contribute to the continuous improvement of tools, methodologies, and internal documentation.
Support junior team members through peer review and mentoring.
Stay current with the latest attack techniques, tooling, and security advisories.
Participate in client meetings, kick-offs, and debriefings.

\n\n\n\n\nLet’s Talk About You

3–6 years of hands-on experience in web application penetration testing.
Familiarity with offensive security methodologies and common vulnerability classes (e.g., OWASP Top 10, SSRF, RCE, deserialization, logic flaws).
Solid experience with manual testing and tools such as Burp Suite, OWASP ZAP, Postman, Nmap, etc.
Comfortable with scripting (Python, Bash, etc.) for automation and exploitation.
Strong understanding of HTTP(S), authentication mechanisms, session handling, input validation, etc.
Experience in reviewing source code or conducting white-box assessments is a plus.
Familiarity with cloud services (AWS, Azure, GCP) and associated security models is a plus.
Able to communicate clearly in English (spoken and written); other languages a plus.
Hold or pursuing certifications such as OSCP, eWPT, GWAPT, OSEP (OSWE or OSED is a plus).
Eligible to work in Belgium; security clearance may be required depending on project.

Nice to haves:

Participation in bug bounty programs or public CTFs.
Familiarity with CI/CD security and DevSecOps principles.
Experience with API security, especially REST.
Experience with GraphQL.
Experience working with clients in regulated industries (finance, healthcare, etc.).
Experience in testing mobile applications on both iOS and Android, including reverse engineering and mobile-specific attack vectors.

\n\n\n\n\n Our story\n \n\nEverybody’s talking about it. Every organisation in every sector is concerned by it. At Deloitte, we’re shaping strategies and transforming technology to minimise Cyber Risk for organisations, and we need you to join us. You’ll build strong relationships within the Belgian Cyber practice with over 100 highly talented individuals. Our team brings together people who graduated in everything from Law, Maths, Computer Science, Cyber Security and Information Management within one team. You will help clients prevent cyber attacks and advise them on how to protect their most valuable assets
\n\n\n\n\nCyber Defense & Resilience is part of the Cyber team.
\n\n\n\n\nWho is Deloitte?
We provide industry-leading audit and assurance, tax and legal, consulting and related services. We are committed to driving innovation across offerings to help our clients address their challenges, while giving our professionals opportunities to learn and grow in this era of transformation. \t
In Belgium, +5000 dedicated professionals active in +10 offices, take great pride in bringing multidisciplinary expertise to a wide variety of clients, from national and international companies, small, fast-growing and large organizations to public institutions and governmental authorities. \t
Why Deloitte?
Be the true you! We foster diversity and inclusion and encourage you to bring your authentic self to work. Explore, question and collaborate while building a career that inspires and energises you. \t
Never stop growing!Diversity of thought makes us stronger. At Deloitte, we tailor a personalized learning experience, offering you the opportunity to grow at your own pace and achieve maximum impact. \t
We practice what we preach! As a Purpose-led organisation, at the heart of everything we do is a set of timeless principles and unifying values. \t

Life looks different for each of us, so we created a varied benefits package that you can tap into: \t

My Benefits My Choice, a flexible rewards plan tailored to your lifestyle and priorities
Sustainable transport options offered by Mobility@Deloitte
Flexible work arrangements for all and initiatives supported by Parents@Deloitte
Wellbeing tips and activities powered by Energise@Deloitte
Topped off with other health benefits and insurance opportunities

Empowering our employees with flexible work arrangements remains essential in today's reality: \t

Hybrid workplace: combination of home office and on-site (+10 offices in Belgium or client's premises).
Part-time employment: all our jobs are open to part-time work under a 90% or 80% regime.

Join us to make an impact together! Apply now!","hiringOrganization":{"@type":"Organization","name":"Deloitte","sameAs":"https://www.deloitte.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Zaventem","addressCountry":"Belgium","addressRegion":"Europe"}}}},{"@type":"ListItem","position":33,"item":{"@type":"JobPosting","title":"Penetration Tester-Remote India","datePosted":"2025-08-18","description":"Responsibilities\n\n\n\n

Conduct Penetration Tests: Perform comprehensive penetration testing on AI models, APIs, cloud infrastructures, and associated systems to uncover security weaknesses.
AI-Specific Threat Analysis: Identify and assess vulnerabilities unique to AI systems, including model inversion, data poisoning, and adversarial attacks.
Tool Development: Create and maintain custom scripts and tools to automate testing processes and improve efficiency.
Reporting: Document findings in detailed reports, providing actionable recommendations to mitigate identified risks.
Collaboration: Work closely with development, data science, and DevOps teams to integrate security best practices throughout the AI product lifecycle.
Stay Updated: Keep abreast of the latest cybersecurity threats, penetration testing techniques, and AI security research.

\n\n\n\n\n

\n\n\n\n\nEssential Skills\n\n\nJob \n\n\n\n

Penetration Testing Tools: Proficiency with tools like Kali Linux, Burp Suite, Metasploit, Nmap, and Wireshark.
Programming and Scripting: Strong skills in Python, Bash, or PowerShell for automating tasks and developing custom testing tools.
Networking and Protocols: In-depth understanding of TCP/IP, DNS, HTTP/HTTPS, and other networking protocols.
Operating Systems: Experience with Windows, Linux, and macOS environments.
Cloud Security: Familiarity with cloud platforms (e.g., AWS, Azure, GCP) and their security configurations.
AI and Machine Learning: Basic understanding of machine learning frameworks (e.g., TensorFlow, PyTorch) and AI model architectures.

\n\n\nPersonal \n\n\n\n

Demonstrated ability to assess complex systems and identify potential vulnerabilities.
Creative approach to overcoming obstacles and finding effective solutions.
Strong verbal and written communication skills to convey findings to technical and non-technical stakeholders.
Commitment to ethical hacking practices and adherence to legal standards.
Willingness to learn and adapt to evolving cybersecurity landscapes.

\n\n\n\n\n

\n\n\n\n\nPreferred Skills\n\n\nJob\n\n\n\n

Advanced Threat Analysis: Experience in identifying and mitigating sophisticated cyber threats.
Social Engineering: Knowledge of social engineering tactics and their application in penetration testing.
Security Frameworks: Familiarity with OWASP, NIST, and ISO/IEC 27001 standards.
Secure Coding Practices: Understanding of secure coding standards and the ability to perform code reviews.

\n\n\nPersonal \n\n\n\n

Experience in leading security projects or mentoring junior team members.
Ability to work effectively in multidisciplinary teams.
Proactive in acquiring new knowledge and staying updated with industry trends.

\n\n\n\n\n

\n\n\n\n\nOther Relevant Information\n\n\n\n

Master’s or Bachelor’s in Engineering with specialization in Computer Science or Artificial Intelligence or Information Technology or a related field.
Demonstrated expertise with a minimum of four years in relevant roles.
This role offers the flexibility of working remotely in India.

\n\n\n\n\n

","hiringOrganization":{"@type":"Organization","name":"The Hackett Group","sameAs":"https://www.linkedin.com/company/the-hackett-group/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"India","addressCountry":"India","addressRegion":"Asia/Pacific"}}}},{"@type":"ListItem","position":34,"item":{"@type":"JobPosting","title":"Senior Penetration Tester- InfoSec","datePosted":"2025-08-19","description":"

At FNBO, our employees are the heart of our story—and we’re committed to their success! Please see below the details of this career opportunity and how it fits into our organization’s success.

Our Modern, Flexible Workplace:

We believe in a Modern, Flexible Workplace, and we are continuously exploring advancements in technology and office environments to make it easier to work from anywhere at any time, allowing for more flexibility in where and how you work. We know that choice and flexibility are important to you. We also recognize that flexible and remote positions can become opportunities for military partners, caregivers, and individuals with disabilities to thrive at our company. We invite you to consider what a Modern, Flexible Workplace can mean for you!

It is anticipated that an incumbent in this role will work onsite for three (3) or more days a week and will have a dedicated workspace when working onsite. Work location is subject to change based on business needs.

Summary of the Job:

We are seeking a Senior Penetration Tester to join our Information Security Assessment team. In this role, you’ll lead offensive security testing across applications, APIs, and enterprise systems while partnering closely with technology and business teams to improve defenses. This position requires deep technical expertise in penetration testing and vulnerability management, combined with strong communication skills to translate findings into actionable security improvements.
You’ll serve as a subject matter expert for penetration testing and secure design, advising project teams, system owners, and business leaders on how to mitigate risk and meet compliance requirements.

About This Role:

What You’ll Do

Lead and execute penetration testing of APIs, web applications, and internal/external systems.
Coordinate penetration testing activities with application/system owners and guide issue resolution.
Act as a subject matter expert on offensive security and secure design for enterprise projects.
Contribute to operating system hardening standards and secure configuration guidelines.
Manage vulnerability management activities and ensure remediation efforts are effective.
Evaluate and advise on new technologies for secure enterprise adoption.
Provide consulting and training to business and technical teams on reducing security risks.
Partner with regulators and internal auditors on compliance reporting and assessments.
Monitor and scan systems for compliance with security standards, remediating gaps as needed.
Recommend process improvements to strengthen the enterprise security posture.

Why Join Us

Work in a highly visible, impact-driven security role.
Collaborate with senior leaders to shape enterprise security strategy.
Stay ahead of the curve with access to new technologies and professional development opportunities.
Be part of a team that values innovation, collaboration, and continuous learning.

The Ideal Candidate for This Role:

What We’re Looking For

5+ years of relevant experience in information security, with at least 2 years of hands-on penetration testing.
Expertise across multiple security domains, including penetration testing, vulnerability assessment, risk assessment, and secure architecture.
Strong knowledge of application security principles, including secure SDLC and threat modeling.
Practical experience with tools such as Burp Suite, Metasploit, Nmap, Nessus, or similar.
Familiarity with regulatory and industry frameworks (ISO 27001, PCI-DSS, FFIEC, OCC, etc.).
Excellent communication and documentation skills — able to present complex findings to both technical and non-technical audiences.
Ability to mentor junior team members and influence cross-functional teams.
Bachelor’s degree in Computer Science, Information Systems, Engineering, or related field (or equivalent experience).
Professional certifications strongly preferred: OSCP, GPEN, GXPN, CISSP, or similar.

Candidates must possess unrestricted work authorization and not require future sponsorship.

Compensation and Benefits Overview:

We offer a variety of benefits designed to keep you and your family physically and financially healthy. Not only do we offer a competitive salary and work-life balance, we offer benefits to match your needs:

Medical, Dental, Vision Insurance
401k, With Matching Contributions
Time Off Programs
Health Savings Account (HSA)/Dependent Care
Employee Banking
Growth Opportunities
Tuition Assistance
Short-Term/Long-Term Disability Insurance

Learn more about FNBO benefits here: https://www.fnbo.com/careers/benefits/.

To obtain compensation and benefit information related to this specific role, e-mail FNBO at TAGAdmin@fnni.com. To ensure you receive a response, include the number of this job (listed below) in the subject line of your message.

Job number: R-20251057

Equal Opportunity & Belonging:

FNBO believes that the quality of our employee experience is at the heart of our customer experience. One key pillar of our intended employee experience is Belonging. Belonging means we are committed to fostering a workplace culture where employees of all backgrounds feel valued, recognized, and empowered to be their authentic selves—no matter their role or where they are in their journey.

Learn more here.

FNBO is an equal opportunity employer for all employees and applicants and makes employment decisions without regard to status or identity.

Click here to download 'EEO is The Law' Self-Print Poster

Click here to download 'EEO is The Law' Supplement for Federal Contractors

Click here to download 'EEO is The Law' GINA Supplement

FNBO is an Equal Opportunity/Affirmative Action/Veterans/Disability Employer - Member FDIC

FNBO follows federal law regarding the use of marijuana (this applies to all non-California applicants)

Application Deadline:

All our jobs will be posted for a minimum of 5 calendar days. Job postings may come down prior to 5 calendar days based on volume of applicants.

","hiringOrganization":{"@type":"Organization","name":"FNBO","sameAs":"https://www.fnbo.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Omaha - FN Tower, United States","addressCountry":"United States","addressRegion":"North America"}}}},{"@type":"ListItem","position":35,"item":{"@type":"JobPosting","title":"Penetration tester / Security Analyst x1","datePosted":"2025-06-30","description":"

Company Description

BETSOL is a cloud-first digital transformation and data management company offering products and IT services to enterprises in over 40 countries. BETSOL team holds several engineering patents, is recognized with industry awards, and BETSOL maintains a net promoter score that is 2x the industry average.

BETSOL’s open source backup and recovery product line, Zmanda (Zmanda.com), delivers up to 50% savings in total cost of ownership (TCO) and best-in-class performance.

BETSOL Global IT Services (BETSOL.com) builds and supports end-to-end enterprise solutions, reducing time-to-market for its customers.

BETSOL offices are set against the vibrant backdrops of Broomfield, Colorado and Bangalore, India.

We take pride in being an employee-centric organization, offering comprehensive health insurance, competitive salaries, 401K, volunteer programs, and scholarship opportunities. Office amenities include a fitness center, cafe, and recreational facilities.

Job Description

We are looking for a penetration tester, to join our security organization and work in collaboration with the software engineering teams, infrastructure, and product teams to create and maintain our solutions secure.

Key Responsibilities

Perform penetration testing of new and existing environments and products – Web applications, Infrastructure and thick clients
Writing formal penetration testing reports to both technical and non-technical audiences
Presenting findings and remediations to the system owners
Documenting and improving our penetration testing process.
Identify vulnerabilities in public cloud offers (GCP, Azure and AWS)
Research emerging security vulnerabilities and the applicability within our realm
Take technical lead on security related topics
Support in source code review efforts
Triage and validate findings from our bug bounty program
Support red teaming exercises as required

Qualifications

Requirements

3-5 years of professional experience penetration testing or Application security.
Understanding of multiple platforms, operating systems, software, communications, and network protocols
Experience with scripting and development languages (ie. Python, PowerShell, JavaScript, and C#)
Proficient in common attack tools, vulnerability assessment and static inspection tools.
Experience using secure development frameworks (ie. OWASP Top 10, SANS Top 25 and Microsoft SDL).
Ability to communicate with both technical and non-technical stakeholders.
Industry related certifications is a plus (OSCP or eWPT)

","hiringOrganization":{"@type":"Organization","name":"BETSOL","sameAs":"https://www.betsol.com"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Belagavi, KA, India","addressCountry":"India","addressRegion":"Asia/Pacific"}}}},{"@type":"ListItem","position":36,"item":{"@type":"JobPosting","title":"Assistant Vice President, Penetration Tester","datePosted":"2025-08-07","description":"

Do you want your voice heard and your actions to count?

Discover your opportunity with Mitsubishi UFJ Financial Group (MUFG), one of the world’s leading financial groups. Across the globe, we’re 120,000 colleagues, striving to make a difference for every client, organization, and community we serve. We stand for our values, building long-term relationships, serving society, and fostering shared and sustainable growth for a better world.

With a vision to be the world’s most trusted financial group, it’s part of our culture to put people first, listen to new and diverse ideas and collaborate toward greater innovation, speed and agility. This means investing in talent, technologies, and tools that empower you to own your career.

Join MUFG, where being inspired is expected and making a meaningful impact is rewarded.

Overview of the Department/Section:

MUFG (Mitsubishi UFJ Financial Group) is one of the world's leading financial groups. Headquartered in Tokyo and with approximately 350 years of history, MUFG is a global network with around 2,300 offices in over 50 countries including the Americas, Europe, the Middle East and Africa, Asia and Oceania, and East Asia. The group has over 150,000 employees, offering services including commercial banking, trust banking, securities, credit cards, consumer finance, asset management, and leasing.

As one of the top financial groups globally with a vison to be the world's most trusted, we want to attract, nurture and retain the most talented individuals in the market. The size and range of MUFG's global business creates opportunities for our employees to stretch themselves and reap the rewards, whilst our common values, to behave with integrity and responsibility, and to build a culture which is fair, transparent, and honest, underpin everything that we do.We aim to be the financial partner of choice for our clients, whatever their requirements, building long-term relationships, serving society, and fostering shared and sustainable growth for a better world.

MUFG’s shares trade on the Tokyo, Nagoya, and New York (NYSE: MTU) stock exchanges. The group’s operating companies include, but are not limited to, Bank of Tokyo-Mitsubishi UFJ, Mitsubishi UFJ Trust and Banking (Japan's leading trust bank), Mitsubishi UFJ Securities Holdings (one of Japan's largest securities firms), and MUFG Americas Holdings.

Please visit our website for more information - mufgemea.com.

Technology is responsible for the operation, development and support of all technology across all areas of the local and international business. We ensure the IT strategy, architecture solutions, and service delivery are firmly aligned to business requirements and long-term strategy of the group.

Technology comprises the following functions:

· Architecture and Development team - which is responsible for the provision of shared services including architecture, middleware, new systems development, quality assurance and release management.
Middle, Risk and Back Office Team - which is responsible for all the applications used by these areas including the main trading system, Murex.

· Front Office Solutions - which provides a business-oriented focus to all technological developments that affect the trading floor.
Infrastructure team - which supports the operation of all production services, voice and data networks, other voice systems and desktop systems.

· Programme Office and Purchasing - which is responsible for definition, prioritisation and delivery of the annual investment portfolio as well as procurement and software licence management.

· IT Risk and Control - which is responsible for implementing and managing all technology related controls over IT and information risk and business continuity, supports the provision of disaster recovery solutions, performs risk assessments, and manages business recovery plans and the business recovery facility. Information Security is also the responsibility of this function.

Main Purpose of the Role:

· To ensure effective management and control of information security, IT and information risk for MUSI by ensuring all appropriate Security, IT and common-sense controls are in place, that these controls are being followed and that this is evidenced across the whole business and IT department.

· The role will involve liaising with the other information security functions within the MUS international business and MUFG group to ensure a consistent approach to all controls, standards and policies is adopted across the organisation.

· To ensure all necessary Information Security controls are in place and that an appropriate strategy to protect the firm from all Cyber, external and internal threats is defined and being implemented.

· To develop, implement and manage compliance with appropriate IS and IT Security policies, standards and procedures.

· To support the relationship and associated reporting requirements between Technology and internal and external bodies e.g. auditors, management committees, Tokyo head office, regulators (via Compliance), Operational Risk.

Key Responsibilities:

In this role, you will be responsible for information/ cyber security across MUFG’s banking arm and securities business under a dual-hat arrangement. Under this arrangement, you will act and make decisions on behalf of both the bank and the securities business, subject to the same remit and level of authority, and irrespective of the entity which employs you.

· Develop and maintain governance structure of red team operations and train, and mentor other members of the Red Team.

· Develop and execute penetration testing plans, including network, web application, and social engineering assessments.

· Collaborate with SOC team and selected vendor to plan and execute annual purple team testing

· Identify security risks and vulnerabilities through simulated attacks, and helping the organization understand the potential impact.

· Manage Red Team tools and the Security Testing & Validation Platform

· Implement and maintain governance of any assessments finding remediation progress and create regular reporting for tech and executives

· Collaborating with other technology teams (i.e. infra, app and etc) to develop and improve defensive strategies and security measures to prevent real-world attacks.

· Stay up-to-date with the latest cybersecurity threats, trends, and technologies to ensure the team’s methods and tools are current and effective.

· Strong understanding of blue team detection use cases

· Create executive report from technical assessment report

· Maintain an up to date, working knowledge of current laws, regulations and best practices relating to information security.

· Support Information Security incidents where requested.

· Support Operational Security duties where requested.

· Manage grey and black box testing solution including identified threats and vulnerabilities

· Availability for out-of-hours support when necessary

Skills and Experience:

· Minimum of 3 years’ experience as a pen tester

· Skilled in developing implants and able to obtain and maintain persistence within corporate systems, while avoiding detection from common security tools.

· Demonstrated knowledge of tactics related to malicious insider activity, organized crime/fraud groups, and threat actors, both state and non-state sponsored.Solid understanding of offensive and pentest technologies

· Ability to provide remediations recommendation based on test and automated security testing result

· Deep understanding of how an advance persistent threat and their tactics, procedure and technics

· Solid understanding of Enterprise Backend to Frontend system architecture

· Familiarity with defender techniques, security monitoring and SIEM tools

· Strong ability to analyse and distil complex issues and present succinct updates to management and associated committees.

· The ability to create clear documentation relating to Operational Processes and Procedures.

Please note MUFG operate a hybrid work policy with 3 days per week in the office.

We are open to considering flexible working requests in line with organisational requirements.

MUFG is committed to embracing diversity and building an inclusive culture where all employees are valued, respected and their opinions count. We support the principles of equality, diversity and inclusion in recruitment and employment, and oppose all forms of discrimination on the grounds of age, sex, gender, sexual orientation, disability, pregnancy and maternity, race, gender reassignment, religion or belief and marriage or civil partnership.

We make our recruitment decisions in a non-discriminatory manner in accordance with our commitment to identifying the right skills for the right role and our obligations under the law.

","hiringOrganization":{"@type":"Organization","name":"MUFG","sameAs":"https://www.bk.mufg.jp/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"London Ropemaker place, United Kingdom","addressCountry":"United Kingdom","addressRegion":"Europe"}}}},{"@type":"ListItem","position":37,"item":{"@type":"JobPosting","title":"Junior Penetration Tester (part-time)","datePosted":"2025-08-12","description":"

Join NN Digital Hub as Junior Penetration Tester! 

Who we are and what we do 
The Cyber Testing Center (CTC) is an international team of security professionals and ethical hackers who thrive on discovering how things work - and how they can be made safer. Every day we put web, mobile applications and infrastructure under the microscope, while also delivering hands-on training and workshops for our internal customers. 

As cyber-threats evolve, so do we. To keep NN’s digital landscape secure, we’re now opening the door to motivated university students who want to get real-world security experience, learn from senior pentesters.

In this role you’ll hunt for vulnerabilities, champion secure-by-design practices across all NN countries, establish testing standards, share cutting-edge tools, and teach development teams how to build resilient applications. Hop on, grow with us, and help safeguard the digital world for millions of NN users. 

What you’ll do (you’ll start small and grow)

Execute penetration testing of web applications (in beginning with support of your mentor)
Validate reports from responsible disclosure program
Update checklists, templates, and internal wikis so the whole team benefits from what you learn.
Share with developers and other colleagues what you have discovered or learned

Why this role fits a student

Approx. 20 hrs per week; we’ll flex your school schedule, exams, and holidays
Hybrid setup - work from home most days, pop into the Prague office when you (or we) need hands-on help
Once you finish your studies, we try to move our part-timers to a full-timer and keep them as a part of team

What we’re looking for (keep it simple)

Active university student in Cyber Security, or a related field.
understanding of the web applications stack
Understanding of networks and experience in programming
Curious mind that enjoys taking things apart to see how they break.
Comfortable speaking and reading technical docs in English
Reliability: deliver the hours you promise and ask for help when stuck

Nice-to-have

Any past experience with CTFs, bug bounties, or security labs at school.

What you’ll get

Paid part-time contract
Laptop + iPhone
Mentoring by senior pentesters
After some time, the possibility of sponsored security courses, certifications, and conferences

Hiring steps

Mini homework: we’ll send you a small vulnerable app; find what you can and write a short report
Technical chat (1 hour) with our Team Lead and a future teammate
Final conversation with Product Owner + HR to set expectations and talk timing

Sounds interesting?
Send us your CV or LinkedIn profile plus a few lines on why cyber security excites you. We review applications daily.

","hiringOrganization":{"@type":"Organization","name":"NN Group","sameAs":"https://www.nn-group.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Digital Hub Prague, Czechia","addressCountry":"Czechia","addressRegion":"Europe"}}}},{"@type":"ListItem","position":38,"item":{"@type":"JobPosting","title":"Penetration Tester - Cyber Security Supervisor","datePosted":"2025-08-11","description":"

We are the leading provider of professional services to the middle market globally, our purpose is to instill confidence in a world of change, empowering our clients and people to realize their full potential. Our exceptional people are the key to our unrivaled, culture and talent experience and our ability to be compelling to our clients. You’ll find an environment that inspires and empowers you to thrive both personally and professionally. There’s no one like you and that’s why there’s nowhere like RSM.

RSM is seeking an experienced application penetration tester with expertise in both manual and automated testing to join our Security and Privacy Risk Consulting group. The ideal candidate will have a strong understanding of various testing methodologies and tools, as well as a passion for uncovering vulnerabilities and identifying potential security risks. This position will play a critical role in helping our clients prevent, detect, and respond to security threats affecting their critical systems and data. As a member of the Security, Privacy, and Risk Consulting team, you will oversee application security testing for our clients and train team members. Our team's goal is to empower both development and security teams with accurate security findings at the highest standards of quality in order to identify and eliminate risk across our clients' application portfolios. Join our team of more than 150 professionals dedicated to serving the cybersecurity needs of our diverse client base within a variety of industries.

Role Responsibilities:
• Supervise and lead security assessments, including static and dynamic application security testing
• Conduct manual penetration testing on web applications, network devices, and other systems
• Collaborate with our clients in a fast-paced environment across many technology stacks and services, including cloud platforms and development technologies
• Develop, enhance, and interpret security standards and guidance
• Demonstrate and promote security best practices, including secure development and cloud security
• Assist with the development of remediation recommendations for identified findings
• Identify and clearly articulate (written and verbal) findings to senior management and clients
• Help identify improvement opportunities for assigned clients
• Stay up-to-date with the latest security trends, technologies, and best practices
• Lead and foster teamwork and open communication to deliver successful outcomes
• Supervise, mentor, and manage the engagement of other staff working on assigned engagements

Qualifications and Experience:
• BS in Computer Science, Engineering, or related field or equivalent work experience
• Advanced expertise in web security, with comprehensive knowledge of vulnerabilities and effective exploitation techniques
• 5+ years of experience in code review, application security testing, or web application development
• Excellent written and verbal communication skills
• Proficient programming skills (e.g. Java, Python, Ruby, JavaScript)
• Experience with cloud platforms, such as AWS, and knowledge of cloud security best practices
• Familiarity with development technologies like Docker, CDK, Terraform, Java, Python, React, GraphQL, JSON, REST, etc.
• Must possess a high degree of integrity and confidentiality, as well as the ability to adhere to both company policies and best practices
• Technical background in application development, networking/system administration, security testing, or related fields
• Experience with both static application security testing (SAST) and dynamic application security testing (DAST) using various tools and techniques
• Preferred, but not required - one or more relevant certifications such as Offensive Security Web Assessor (OSWA), Offensive Security Web Expert (OSWE), Offensive Security Certified Professional (OSCP), Burp Suite Certified Practitioner, or AWS Certified Security Specialist.

At RSM, we offer a competitive benefits and compensation package for all our people. We offer flexibility in your schedule, empowering you to balance life’s demands, while also maintaining your ability to serve clients. Learn more about our total rewards at https://rsmus.com/careers/working-at-rsm/benefits.

All applicants will receive consideration for employment as RSM does not tolerate discrimination and/or harassment based on race; color; creed; sincerely held religious beliefs, practices or observances; sex (including pregnancy or disabilities related to nursing); gender; sexual orientation; HIV Status; national origin; ancestry; familial or marital status; age; physical or mental disability; citizenship; political affiliation; medical condition (including family and medical leave); domestic violence victim status; past, current or prospective service in the US uniformed service; US Military/Veteran status; pre-disposing genetic characteristics or any other characteristic protected under applicable federal, state or local law.

Accommodation for applicants with disabilities is available upon request in connection with the recruitment process and/or employment/partnership. RSM is committed to providing equal opportunity and reasonable accommodation for people with disabilities. If you require a reasonable accommodation to complete an application, interview, or otherwise participate in the recruiting process, please call us at 800-274-3978 or send us an email at careers@rsmus.com.

RSM does not intend to hire entry level candidates who will require sponsorship now OR in the future (i.e. F-1 visa holders). If you are a recent U.S. college / university graduate possessing 1-2 years of progressive and relevant work experience in a same or similar role to the one for which you are applying, excluding internships, you may be eligible for hire as an experienced associate.

RSM will consider for employment qualified applicants with arrest or conviction records in accordance with the requirements of applicable law, including but not limited to, the California Fair Chance Act, the Los Angeles Fair Chance Initiative for Hiring Ordinance, the Los Angeles County Fair Chance Ordinance for Employers, and the San Francisco Fair Chance Ordinance. For additional information regarding RSM’s background check process, including information about job duties that necessitate the use of one or more types of background checks, click here.

At RSM, an employee’s pay at any point in their career is intended to reflect their experiences, performance, and skills for their current role. The salary range (or starting rate for interns and associates) for this role represents numerous factors considered in the hiring decisions including, but not limited to, education, skills, work experience, certifications, location, etc. As such, pay for the successful candidate(s) could fall anywhere within the stated range.

Compensation Range: $95,400 - $192,000

Individuals selected for this role will be eligible for a discretionary bonus based on firm and individual performance.

","hiringOrganization":{"@type":"Organization","name":"RSM","sameAs":"https://rsmus.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"USA-TX-Houston-1330 Post Oak Blvd, Suite 2400, United States","addressCountry":"United States","addressRegion":"North America"}}}},{"@type":"ListItem","position":39,"item":{"@type":"JobPosting","title":"Penetration Tester Senior Associate, Global","datePosted":"2025-08-14","description":"

Line of Service

Internal Firm Services

Industry/Sector

Not Applicable

Specialism

IFS - Internal Firm Services - Other

Management Level

Senior Associate

Job Description & Summary

At PwC Global, our people in information technology operations focus on managing and maintaining the technology infrastructure and systems to provide smooth operations and efficient delivery of IT services. This includes monitoring network performance, troubleshooting issues, and implementing security measures.

Those in IT support at PwC Global will focus on providing front-line technical assistance and troubleshooting to facilitate smooth functioning of computer systems software and hardware. Working in this area, you will be responsible for providing support to internal and external clients to address and resolve issues in a timely and efficient manner through a variety of mediums/channels. The guidance will help to resolve technical issues and maintain efficient IT operations at the L2 up to L4 support levels.

Meaningful work you’ll be part of

As a Penetration Tester Senior Associate, Global, you’ll work as part of a team of problem solvers, helping to solve business issues, deliver high quality client service and operational efficiency. Responsibilities include but are not limited to:

Proactively assisting management in the scoping, planning and execution of assessments
Performing penetration testing assessments
Executing tasks aligned to the Pentest Team with autonomy
Presenting technical findings with a focus on business impact to management
Contributing to the development of a team’s technical acumen
Establishing thought leadership at the Network Information Security (NIS) and firm-wide level in a particular knowledge area
Demonstrating cultural dexterity and modifying behavior to the environment/culture
Collaborating with multiple stakeholders across functional and technical skill sets
Assisting in collaborating with Information Technology (IT) and NIS to align information security policies and standards, evaluations, and technological tools

Experiences and skills you’ll use to solve

Significant experience with common pentesting tools such as Rubeus, Mimikatz, Impacket, Certify, ForgeCert, ROADTools, ADOKit, and Burp Pro
Demonstrating proficiency in understanding programing or scripting languages (C/C++, C#, Python, Go, PowerShell)
Demonstrating knowledge of Active Directory concepts and Cloud infrastructure concepts in one of the following platforms: Azure, AWS, GCP
Demonstrating knowledge of Windows architecture and internals and appropriate judgment prior to escalating to management
Fostering healthy work relationships by demonstrating appropriate conflict-resolution skills
Demonstrating experience performing penetration testing assessments and high-level understanding of the principles of information security engineering, architecture, and application security
Demonstrating prior system administration, incident response, Security Operations Center (SOC) or network engineering experience preferred
PwC Canada is committed to cultivating an inclusive, hybrid work environment. Exact expectations for your team can be discussed with your interviewer

Why you’ll love PwC

We’re inspiring and empowering our people to change the world. Powered by the latest technology, you’ll be a part of diverse teams helping public and private clients build trust and deliver sustained outcomes. This meaningful work, and our continuous development environment, will take your career to the next level. We reward your impact, and support your wellbeing, through a competitive compensation package, inclusive benefits and flexibility programs that will help you thrive in work and life. Learn more about our Application Process and Total Rewards Package at: https://jobs-ca.pwc.com/ca/en/life-at-pwc

PwC Canada acknowledges that we work and live across Turtle Island, on the land that is now known as Canada, which are the lands of the ancestral, treaty and unceded territories of the First Nations, Métis and Inuit Peoples. We recognize the systemic racism, colonialism and oppression that Indigenous Peoples have experienced and still go through, and we commit to allyship and solidarity.

Education (if blank, degree and/or field of study not specified)

Degrees/Field of Study required:

Degrees/Field of Study preferred:

Certifications (if blank, certifications not specified)

Required Skills

Optional Skills

Accepting Feedback, Accepting Feedback, Active Listening, Analytical Thinking, Communication, Computer Engineering, Computer Program Installation, Computer Programming, Computer Technical Support, Creativity, Embracing Change, Emotional Regulation, Empathy, Enterprise Architecture, Incident Management and Resolution (IMR), Inclusion, Information and Communications Technology (ICT), Intellectual Curiosity, IT Infrastructure Upgrades, IT Operations, IT Operations Management, IT Project Lifecycle, IT Support, IT Troubleshooting, Learning Agility {+ 11 more}

Desired Languages (If blank, desired languages not specified)

Travel Requirements

Not Specified

Available for Work Visa Sponsorship?

Government Clearance Required?

Job Posting End Date

At PwC Canada, our most valuable asset is our people and we grow stronger as we learn from one another. We’re committed to creating an equitable and inclusive community of solvers where everyone feels that they truly belong. We understand that experience comes in many forms and building trust in society and solving important problems is only possible if we reflect the mosaic of the society we live in.

We’re committed to providing accommodations throughout the application, interview, and employment process. If you require an accommodation to be at your best, please let us know during the application process.

To learn more about inclusion and diversity at PwC Canada: https://www.pwc.com/ca/en/about-us/diversity-inclusion.html. Be a part of The New Equation.

Chez PwC Canada, notre atout le plus précieux, c’est notre personnel. Et c’est en apprenant les uns des autres que nous devenons plus forts. Nous avons à cœur de créer une communauté équitable et inclusive de professionnels de la résolution de problèmes, dans laquelle chacun se sent vraiment à sa place. Nous savons que l’expérience peut prendre diverses formes et, pour nous, donner confiance au public et résoudre des problèmes importants n’est possible que si notre milieu de travail reflète la diversité de la société dans laquelle nous vivons.

Nous tenons à répondre à vos besoins tout au long du processus de demande d’emploi, d’entrevue et d’embauche. Si vous avez besoin de mesures d’adaptation pour être parfaitement à l’aise, faites-le-nous savoir à l’étape de la demande d’emploi.

Pour en savoir plus sur l’inclusion et la diversité chez PwC Canada: https://www.pwc.com/ca/fr/about-us/diversity-inclusion.html. Faites partie de La Nouvelle équation.

","hiringOrganization":{"@type":"Organization","name":"PwC","sameAs":"https://www.pwc.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Toronto - 18 York Street, Canada","addressCountry":"Canada","addressRegion":"North America"}}}},{"@type":"ListItem","position":40,"item":{"@type":"JobPosting","title":"Penetration Tester - Cyber Security Supervisor","datePosted":"2025-08-19","description":"

We are the leading provider of professional services to the middle market globally, our purpose is to instill confidence in a world of change, empowering our clients and people to realize their full potential. Our exceptional people are the key to our unrivaled, inclusive culture and talent experience and our ability to be compelling to our clients. You’ll find an environment that inspires and empowers you to thrive both personally and professionally. There’s no one like you and that’s why there’s nowhere like RSM.

At RSM, we offer a competitive benefits and compensation package for all our people. We offer flexibility in your schedule, empowering you to balance life’s demands, while also maintaining your ability to serve clients. Learn more about our total rewards at https://rsmcanada.com/careers/life-at-rsm/rewards-and-benefits.html.

RSM does not tolerate discrimination and/or harassment based on race; colour; creed; sincerely held religious beliefs, practices or observances; sex (including pregnancy or disabilities related to nursing); gender (including gender identity and/or gender expression); sexual orientation; national origin; ancestry; familial or marital status; age; physical or mental disability; citizenship; political affiliation; medical condition (including family and medical leave); domestic violence victim status; past, current or prospective service in the Canadian uniformed service; Canadian Military/Veteran status; pre-disposing genetic characteristics or any other characteristic protected under applicable provincial employment legislation.

Compensation Range: $75,000 - $120,000

Individuals selected for this role will be eligible for a discretionary bonus based on firm and individual performance.

","hiringOrganization":{"@type":"Organization","name":"RSM","sameAs":"https://rsmus.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"CAN-AB-Calgary-112 4th Avenue SW, Canada","addressCountry":"Canada","addressRegion":"North America"}}}},{"@type":"ListItem","position":41,"item":{"@type":"JobPosting","title":"Exploit Developer/Penetration Tester 2/3","datePosted":"2025-07-16","description":"RELOCATION ASSISTANCE: No relocation assistance available

CLEARANCE TYPE: Top Secret

TRAVEL: Yes, 25% of the Time

Description

At Northrop Grumman, our employees have incredible opportunities to work on revolutionary systems that impact people's lives around the world today, and for generations to come. Our pioneering and inventive spirit has enabled us to be at the forefront of many technological advancements in our nation's history - from the first flight across the Atlantic Ocean, to stealth bombers, to landing on the moon. We look for people who have bold new ideas, courage and a pioneering spirit to join forces to invent the future, and have fun along the way. Our culture thrives on intellectual curiosity, cognitive diversity and bringing your whole self to work — and we have an insatiable drive to do what others think is impossible. Our employees are not only part of history, they're making history.

You think Rocket Science is cool? How about hacking it? Northrop Grumman is adding to our internally-focused penetration testing group, the Cyber Assessment Tiger Team. We are charged with emulating and staying at least one step ahead of the most sophisticated attackers in the world, and improving the survivability & resilience of our products, platforms and environments, worldwide. Here, penetration testing isn't for compliance, it's for making a difference in the success of our customers' missions.

Successful CATT members are intensely curious, excellent communicators, brilliant researchers, skilled hackers, and disciplined engineers. If you enjoy continuously learning new platforms/APIs/protocols/architectures/languages, and leveraging that knowledge to reverse engineer, develop, and demonstrate exploits against some of the most sophisticated technologies anywhere, let's talk.

Between engagements, our teams enjoy continuous education, cross-training, and independent R&D, and are responsible for sharing within the team and among our customers and the greater company CISO/Global Secure Solutions organization.

The Exploit Developer/Penetration Tester position conducts network or software vulnerability assessments and penetration testing, utilizing reverse engineering techniques. It perform vulnerability analysis and exploitation of applications, operating systems, or networks. Also identifies intrusion or incident path and method. Isolates, blocks or removes threat access. Evaluates system security configurations. Evaluates findings and performs root cause analysis. Performs analysis of complex software systems to determine both functionality and intent of software systems. Resolves highly complex malware and intrusion issues. Contributes to the design, development and implementation of countermeasures, system integration, and tools specific to Cyber and Information Operations. May prepare and presents technical reports and briefings. May perform documentation, vetting and weaponization of identified vulnerabilities for operational use.

Responsibilities include:

Code analysis & hardware/binary reverse engineering to identify functionality and vulnerabilities on hardware & software including avionics and embedded systems
Evaluate system security configurations for effectiveness and exploitation opportunities
Develop and execute complete adversarial cyber testing scenarios against components, applications, operating systems, or complete integrated systems
Contribute to the design, development, implementation, and integration of Offensive Cyber Operations tools against platforms, payloads & systems
Contribute to the design, development, implementation, and integration of system Cyber Survivability Attributes
Contribute to the preparation of technical reports and briefings
Continually improve the knowledge and capabilities of yourself & the greater team

This position is hybrid/work from home part of the time, but also requires occasional travel within the continental United States, as well as possible international travel (up to 25% of the time). This role can be performed by a level 2 (early career) or level 3 (mid-career).

Basic Qualifications:

For a level 2: a minimum of High School Diploma, or a GED, and 6 years of experience with Cyber Security, Red Team, Penetration Testing, or Exploit Development is required.
For a level 3: a minimum of High School Diploma, or a GED, and 9 years of experience with Cyber Security, Red Team, Penetration Testing, or Exploit Development is required.
Must have software development to support penetration testing, including vuln dev, R/E tool modules, covert tunneling, scanning scripts, and passive collection
Must have 2 years of experience in at least three (3) of the following languages: C, C++, C#, Python, Ruby, Rust, Bourne/Bash, PowerShell, Visual Basic, Go, PHP, Javascript, HTML
Must be willing to travel domestically and internationally (up to 25% per year)
Must have the ability to obtain, and maintain, a DOD Top Secret security clearance, as well as an SCI access level, as a condition of continued employment. Additional clearances may also be required for certain government programs

Preferred Qualifications:

The ideal candidate will have a BS degree in Software Development, Computer Engineering, Computer Science, or other similar STEM related degree, to include 9 years of experience in Cyber Protection
Technical computer/network knowledge and understanding of common computer hardware, software, networks, communications and connectivity
Experience conducting full-scope assessments and penetration tests including: social engineering, server & client-side attacks, protocol subversion, physical access restrictions, and web application exploitation
Proficiency in the internal workings of either Linux, Unix, and/or Windows operating systems
Experience using scan / attack / assess tools and techniques
Ability and desire to learn additional Operating Systems, Computing Architectures, and Programming languages
Demonstrated experience in technical report writing
Technical certifications that support pen testing such as OSCP/OSCE/OSEE, GPEN/GXPN
Software/hardware reverse engineering for vulnerability and exploit R&D
RTOS experience (Integrity, Nucleus, VxWorks, etc.)
PowerPC, ARM, Xilinx FPGA, RISCx, other hardware computing development experience
Assembly language experience (any current architecture/OS)
TCP/IP MITM, spoofing, exploitation experience
Platform communications protocol expertise (ARINC 429, MIL-STD-1553, Spacewire, etc.)
Cryptanalysis and cryptosystem exploitation experience
In depth understanding of layer 2-7 communication protocols, common encoding and encryption schemes and algorithms
Understanding of and experience either executing or defending against complex, targeted cyber threats to high-value systems and data
Active Top Secret, and/or SCI access with an SSBI completed within the past 4 years, is highly desirable

Salary Range: $89,400.00 - $134,200.00Salary Range 2: $110,300.00 - $165,500.00

The above salary range represents a general guideline; however, Northrop Grumman considers a number of factors when determining base salary offers such as the scope and responsibilities of the position and the candidate's experience, education, skills and current market conditions.

Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay. Annual bonuses are designed to reward individual contributions as well as allow employees to share in company results. Employees in Vice President or Director positions may be eligible for Long Term Incentives. In addition, Northrop Grumman provides a variety of benefits including health insurance coverage, life and disability insurance, savings plan, Company paid holidays and paid time off (PTO) for vacation and/or personal business.

The application period for the job is estimated to be 20 days from the job posting date. However, this timeline may be shortened or extended depending on business needs and the availability of qualified candidates.

Northrop Grumman is an Equal Opportunity Employer, making decisions without regard to race, color, religion, creed, sex, sexual orientation, gender identity, marital status, national origin, age, veteran status, disability, or any other protected class. For our complete EEO and pay transparency statement, please visit http://www.northropgrumman.com/EEO. U.S. Citizenship is required for all positions with a government clearance and certain other restricted positions.","hiringOrganization":{"@type":"Organization","name":"Northrop Grumman","sameAs":"https://www.northropgrumman.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"VAUKEE, United States","addressCountry":"United States","addressRegion":"North America"}}}},{"@type":"ListItem","position":42,"item":{"@type":"JobPosting","title":"Senior Penetration Tester / Adversary Simulation Specialist","datePosted":"2025-08-04","description":"

Job Description & Summary

A career within Cybersecurity and Privacy services at PwC offers the opportunity to work on the frontlines of digital defense, helping clients identify vulnerabilities before adversaries do. As cyber threats become more sophisticated, adversary simulation and offensive security are essential to building resilient organizations. We are growing our cybersecurity capabilities in the Baltics and are seeking a technically skilled and motivated Penetration Tester / Adversary Simulation Specialist to join our team. This role focuses on delivering offensive security engagements, both for local clients and in collaboration with PwC teams across the broader Central and Eastern Europe region.

As a Penetration Tester / Adversary Simulation Specialist, you will lead and support offensive security engagements including infrastructure, web application, and cloud penetration testing, as well as red and purple teaming initiatives. You will simulate real-world attack scenarios, identify exploitable weaknesses, and provide actionable guidance to clients seeking to strengthen their defenses.

Job location: Vilnius, Riga or Tallinn

Main Responsibilities:

Conduct infrastructure, application, and cloud penetration tests using industry-standard tools and custom scripts.

Simulate advanced attack scenarios through red team or assumed breach exercises.

Develop and deliver clear, technically accurate findings and remediation guidance to both technical and executive stakeholders.

Collaborate with incident response, cloud security, and digital identity teams to integrate offensive insights into broader cyber programs.

Stay current on threat actor tactics, techniques, and procedures (TTPs) and continuously evolve testing approaches.

Contribute to development of internal toolkits, testing procedures, and service documentation.

Requirements:

3+ years of hands-on experience in penetration testing or offensive security roles.

Proficiency in using tools such as Burp Suite, Metasploit, Cobalt Strike, and scripting languages like Python or PowerShell.

Understanding of MITRE ATT&CK framework and red/purple team methodologies.

Relevant certifications such as OSCP, CRTP, OSCE, or similar are highly desirable.

Strong analytical, problem-solving, and communication skills; fluent English required.

We offer:

A monthly gross salary ranging from EUR 3000 to EUR 6000 EUR.

Benefits:

Competence development and certifications

Great office location in the city center, equipped with everything you need for a small break at work and fresh snacks at all times

Pet-friendly office

Company events: regular internal events, quarterly team buildings

Flexible work-from-home policy, workations and trust days for self-care

Personal Accident Insurance

Enhanced employer sickness pay benefit

Coach and Buddy program for seamless onboarding and significant career development

Wellbeing Initiatives, psychologist consultations

Day off during your birthday

Choice of additional benefits, including:

Private health insurance

Additional pension accumulation

Compensation for equipment for a comfortable home office

Parking place near the office

Budget for personal development training

Annual sports club membership

Annual public transport ticket

Time to start: Autumn 2025

If you have any questions please reach out us via email lt_join@pwc.com.

","hiringOrganization":{"@type":"Organization","name":"PwC","sameAs":"https://www.pwc.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Vilnius - J. Jasinskio 16B, Lithuania","addressCountry":"Lithuania","addressRegion":"Europe"}}}},{"@type":"ListItem","position":43,"item":{"@type":"JobPosting","title":"Senior Penetration Tester - Prague (EU Secret)","datePosted":"2025-08-08","description":"

Company Description

Sopra Steria offers tailored, end-to-end corporate technology and software solutions to help clients make bold choices and deliver results. Successfully so! With more than 56.000 colleagues in 30 countries, we rank as Europe’s leading digital solutions provider. Some of the most successful companies in Europe rely on our technology due to our commitment to innovation, collaboration, and value in business development.

The world is how we shape it. Let’s shape it together.

Job Description

We are looking for a Senior Penetration Tester (Network Protocols, Operating Systems & Offensive Security).

Those three aspects are fundamental - network and operating systems in the context of offensive security.

EU Secret security clearance is pivotal for this role.

Activities:

\n- The ability to quickly learn new information, particularly regarding non-standard network protocols used between dedicated devices from various manufacturers

- Low-level understanding of various network protocols and the ability to quickly solve diverse networking issues

- Troubleshooting skills for resolving problems at both the operating system and networking levels - Experience with a wide range of network services (e.g., DHCP, FTP, HTTP, SSH, Telnet, and many others)

- The ability to plan actions in detail - Excellent knowledge of the Linux operating system, including the ability to operate at a low level - Proficiency in programming in C, sufficient to develop custom tools and adapt existing software to specific needs

- Proficiency in Python programming using the Scapy library, including the ability to create scripts that generate specific types of traffic or modify network traffic in real time (e.g., conducting Man-in-the-Middle attacks)

- The ability to conduct traditional penetration tests of IT infrastructure

- The ability to work in unusual conditions at the client’s site, without internet access

- General understanding of various system and network security mechanisms and best practices

- Understanding of key IT security concepts such as confidentiality, integrity, and availability

Additional Information

Do you picture yourself in a fast-growing, vibrant team at the cutting edge of software implementation? Does working with international clients across multiple industries sound exciting? Then you’re in the right place.

We offer a generous employee benefits package that includes:

A variety of perks, such as mobility options (including a company car), insurance coverage, meal vouchers, eco-cheques, and more.
Continuous learning opportunities through the Sopra Steria Academy to support your career development.
The opportunity to connect with fellow Sopra Steria colleagues at various team events.

People are the cornerstone of our success. That’s why we aspire to be bolder together. Our goal is to build high-functioning teams and healthy team environments that inspire and help each other to deliver excellence for each of our customers.

Excited about this job opportunity? Ready to shape the world with us? Great! We are looking forward to your application!

Want to know what happens next?

The recruitment process typically begins with the first step, where the recruiter screens candidates based on their qualifications and fit for the role. This is followed by the second step, where candidates undergo more in-depth evaluations, including technical assessments hiring manager or client to assess both technical skills and team compatibility. The third step involves the company reviewing feedback and aligning on a potential offer. Finally, in the final step, the candidate receives a formal job offer.

______

Sopra Steria is an equal opportunity employer. All qualified applicants will be considered for employment without regard to age, ancestry, nationality, color, family or medical leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, gender (including pregnancy), sexual orientation or any other characteristic protected by applicable local laws, regulations and ordinances. We foster a work environment that is inclusive and respectful of all differences.

","hiringOrganization":{"@type":"Organization","name":"Sopra Steria","sameAs":"https://www.soprasteria.com"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Brussels, Belgium","addressCountry":"Belgium","addressRegion":"Europe"}}}},{"@type":"ListItem","position":44,"item":{"@type":"JobPosting","title":"Senior Penetration Tester / Adversary Simulation Specialist","datePosted":"2025-08-04","description":"

Job Description & Summary

Main Responsibilities:

Conduct infrastructure, application, and cloud penetration tests using industry-standard tools and custom scripts.

Simulate advanced attack scenarios through red team or assumed breach exercises.

Develop and deliver clear, technically accurate findings and remediation guidance to both technical and executive stakeholders.

Collaborate with incident response, cloud security, and digital identity teams to integrate offensive insights into broader cyber programs.

Stay current on threat actor tactics, techniques, and procedures (TTPs) and continuously evolve testing approaches.

Contribute to development of internal toolkits, testing procedures, and service documentation.

Requirements:

3+ years of hands-on experience in penetration testing or offensive security roles.

Proficiency in using tools such as Burp Suite, Metasploit, Cobalt Strike, and scripting languages like Python or PowerShell.

Understanding of MITRE ATT&CK framework and red/purple team methodologies.

Relevant certifications such as OSCP, CRTP, OSCE, or similar are highly desirable.

Strong analytical, problem-solving, and communication skills; fluent English required.

We offer:

A monthly gross salary ranging from EUR 3000 to EUR 6000 EUR.

Benefits:

Competence development and certifications

Great office location in the city center, equipped with everything you need for a small break at work and fresh snacks at all times

Pet-friendly office

Company events: regular internal events, quarterly team buildings

Flexible work-from-home policy, workations and trust days for self-care

Personal Accident Insurance

Enhanced employer sickness pay benefit

Coach and Buddy program for seamless onboarding and significant career development

Wellbeing Initiatives, psychologist consultations

Day off during your birthday

Choice of additional benefits, including:

Private health insurance

Additional pension accumulation

Compensation for equipment for a comfortable home office

Parking place near the office

Budget for personal development training

Annual sports club membership

Annual public transport ticket

Time to start: Autumn 2025

If you have any questions please reach out us via email lt_join@pwc.com.

","hiringOrganization":{"@type":"Organization","name":"PwC","sameAs":"https://www.pwc.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Vilnius - J. Jasinskio 16B, Lithuania","addressCountry":"Lithuania","addressRegion":"Europe"}}}},{"@type":"ListItem","position":45,"item":{"@type":"JobPosting","title":"T&T Consultant - Penetration Tester - SG","datePosted":"2025-08-10","description":"

Are you ready to unleash your potential?

At Deloitte, our purpose is to make an impact that matters for our clients, our people, and the communities we serve.

We believe we have a responsibility to be a force for good, and WorldImpact is our portfolio of initiatives focused on making a tangible impact on society’s biggest challenges and creating a better future. We strive to advise clients on how to deliver purpose-led growth and embed more equitable, inclusive as well as sustainable business practices.

Hence, we seek talented individuals driven to excel and innovate, working together to achieve our shared goals.

We are committed to creating positive work experiences that foster a culture of respect and inclusion, where diverse perspectives are celebrated, and everyone is recognised for their contributions.

Ready to unleash your potential with us? Join the winning team now!

Work you'll do:

Identifies and mitigates cyber risks by assessing systems, networks, and applications for vulnerabilities. They simulate real-world attacks, document findings, and provide security improvement recommendations. Staying updated on cybersecurity trends, they collaborate with other professionals to develop comprehensive security strategies.

Conduct security assessments on systems, networks, and applications.
Simulate cyber attacks to identify system vulnerabilities.
Typical security testing activities include:\n
- Software/Web Application/Web Services penetration testing
- Network Penetration Testing
- Mobile Application Penetration Testing
- Thick Client Penetration Testing
\n
Develop and execute penetration testing methodologies.
Prepare detailed reports on the findings of penetration tests.
Recommend and implement improvements to security policies.
Stay updated with the latest penetration testing tools and techniques.
Train staff on security awareness and procedures.
Collaborate with IT staff to improve system security.

Your role as a leader:

At Deloitte, we believe in the importance of empowering our people to be leaders at all levels. We expect our people to embrace and live our purpose and shared values, challenging themselves every day to identify issues that are most important to our clients, our people and the communities, and to make an impact that matters. Additionally, Consultants across our Firm are expected to:

Actively seek out developmental opportunities for growth, act as strong brand ambassadors for the firm as well as share their knowledge and experience with others.
Understand the goals of our internal and external stakeholder to set personal priorities as well as align their teams’ work to achieve the objectives.
Constantly challenge themselves, collaborate with others to deliver on tasks and take accountability for the results.
Build productive relationships and communicate effectively in order to positively influence teams and other stakeholders.
Project integrity and confidence while motivating others through team collaboration as well as recognising individual strengths, differences, and contributions.

Requirements:

If you are someone with:

Bachelor's degree in information security, information systems management, computer science, engineering, or other related discipline.
More than 2 years of experience in information technology, IT audits, or cyber security.
Proven experience as a Penetration Tester or similar role in cybersecurity.
Proficiency in using automated tools and manual testing techniques.
Strong understanding of common vulnerabilities and exploits.
Relevant certifications (e.g., CEH, OSCP, CREST) are a plus.
Excellent problem-solving and analytical skills.
Must be able to work under pressure and produce content to tight timelines.
Ability to self-manage, prioritizing a variety of tasks.

Due to volume of applications, we regret only shortlisted candidates will be notified.

Please note that Deloitte will never reach out to you directly via messaging platforms to offer you employment opportunities or request money or your personal information. Kindly apply for roles that you are interested via this official Deloitte website.

#LI-AN

","hiringOrganization":{"@type":"Organization","name":"Deloitte","sameAs":"https://www.deloitte.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Singapore, Singapore, SG","addressCountry":"Singapore","addressRegion":"Asia/Pacific"}}}},{"@type":"ListItem","position":46,"item":{"@type":"JobPosting","title":"T&T Consultant - Penetration Tester - SG","datePosted":"2025-08-10","description":"

Are you ready to unleash your potential?

At Deloitte, our purpose is to make an impact that matters for our clients, our people, and the communities we serve.

Hence, we seek talented individuals driven to excel and innovate, working together to achieve our shared goals.

We are committed to creating positive work experiences that foster a culture of respect and inclusion, where diverse perspectives are celebrated, and everyone is recognised for their contributions.

Ready to unleash your potential with us? Join the winning team now!

Work you'll do:

Conduct security assessments on systems, networks, and applications.
Simulate cyber attacks to identify system vulnerabilities.
Typical security testing activities include:\n
- Software/Web Application/Web Services penetration testing
- Network Penetration Testing
- Mobile Application Penetration Testing
- Thick Client Penetration Testing
\n
Develop and execute penetration testing methodologies.
Prepare detailed reports on the findings of penetration tests.
Recommend and implement improvements to security policies.
Stay updated with the latest penetration testing tools and techniques.
Train staff on security awareness and procedures.
Collaborate with IT staff to improve system security.

Your role as a leader:

Actively seek out developmental opportunities for growth, act as strong brand ambassadors for the firm as well as share their knowledge and experience with others.
Understand the goals of our internal and external stakeholder to set personal priorities as well as align their teams’ work to achieve the objectives.
Constantly challenge themselves, collaborate with others to deliver on tasks and take accountability for the results.
Build productive relationships and communicate effectively in order to positively influence teams and other stakeholders.
Project integrity and confidence while motivating others through team collaboration as well as recognising individual strengths, differences, and contributions.

Requirements:

If you are someone with:

Bachelor's degree in information security, information systems management, computer science, engineering, or other related discipline.
More than 3 years of experience in information technology, IT audits, or cyber security.
Proven experience as a Penetration Tester or similar role in cybersecurity.
Proficiency in using automated tools and manual testing techniques.
Strong understanding of common vulnerabilities and exploits.
Relevant certifications (e.g., CEH, OSCP, CREST) are a plus.
Excellent problem-solving and analytical skills.
Must be able to work under pressure and produce content to tight timelines.
Ability to self-manage, prioritizing a variety of tasks.

Due to volume of applications, we regret only shortlisted candidates will be notified.

#LI-AN

","hiringOrganization":{"@type":"Organization","name":"Deloitte","sameAs":"https://www.deloitte.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Singapore, Singapore, SG","addressCountry":"Singapore","addressRegion":"Asia/Pacific"}}}},{"@type":"ListItem","position":47,"item":{"@type":"JobPosting","title":"T&T Consultant - Penetration Tester - SG","datePosted":"2025-08-10","description":"

Are you ready to unleash your potential?

At Deloitte, our purpose is to make an impact that matters for our clients, our people, and the communities we serve.

Hence, we seek talented individuals driven to excel and innovate, working together to achieve our shared goals.

We are committed to creating positive work experiences that foster a culture of respect and inclusion, where diverse perspectives are celebrated, and everyone is recognised for their contributions.

Ready to unleash your potential with us? Join the winning team now!

Work you'll do:

Conduct security assessments on systems, networks, and applications.
Simulate cyber attacks to identify system vulnerabilities.
Typical security testing activities include:\n
- Software/Web Application/Web Services penetration testing
- Network Penetration Testing
- Mobile Application Penetration Testing
- Thick Client Penetration Testing
\n
Develop and execute penetration testing methodologies.
Prepare detailed reports on the findings of penetration tests.
Recommend and implement improvements to security policies.
Stay updated with the latest penetration testing tools and techniques.
Train staff on security awareness and procedures.
Collaborate with IT staff to improve system security.

Your role as a leader:

Actively seek out developmental opportunities for growth, act as strong brand ambassadors for the firm as well as share their knowledge and experience with others.
Understand the goals of our internal and external stakeholder to set personal priorities as well as align their teams’ work to achieve the objectives.
Constantly challenge themselves, collaborate with others to deliver on tasks and take accountability for the results.
Build productive relationships and communicate effectively in order to positively influence teams and other stakeholders.
Project integrity and confidence while motivating others through team collaboration as well as recognising individual strengths, differences, and contributions.

Requirements:

If you are someone with:

Bachelor's degree in information security, information systems management, computer science, engineering, or other related discipline.
More than 2 years of experience in information technology, IT audits, or cyber security.
Proven experience as a Penetration Tester or similar role in cybersecurity.
Proficiency in using automated tools and manual testing techniques.
Strong understanding of common vulnerabilities and exploits.
Relevant certifications (e.g., CEH, OSCP, CREST) are a plus.
Excellent problem-solving and analytical skills.
Must be able to work under pressure and produce content to tight timelines.
Ability to self-manage, prioritizing a variety of tasks.

Due to volume of applications, we regret only shortlisted candidates will be notified.

#LI-AN

","hiringOrganization":{"@type":"Organization","name":"Deloitte","sameAs":"https://www.deloitte.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Singapore, Singapore, SG","addressCountry":"Singapore","addressRegion":"Asia/Pacific"}}}},{"@type":"ListItem","position":48,"item":{"@type":"JobPosting","title":"T&T Consultant - Penetration Tester - ID","datePosted":"2025-08-10","description":"

Are you ready to unleash your potential?

At Deloitte, our purpose is to make an impact that matters for our clients, our people, and the communities we serve.

Hence, we seek talented individuals driven to excel and innovate, working together to achieve our shared goals.

We are committed to creating positive work experiences that foster a culture of respect and inclusion, where diverse perspectives are celebrated, and everyone is recognised for their contributions.

Ready to unleash your potential with us? Join the winning team now!

Work you'll do:

Conduct security assessments on systems, networks, and applications.
Simulate cyber attacks to identify system vulnerabilities.
Typical security testing activities include:\n
- Software/Web Application/Web Services penetration testing
- Network Penetration Testing
- Mobile Application Penetration Testing
- Thick Client Penetration Testing
\n
Develop and execute penetration testing methodologies.
Prepare detailed reports on the findings of penetration tests.
Recommend and implement improvements to security policies.
Stay updated with the latest penetration testing tools and techniques.
Train staff on security awareness and procedures.
Collaborate with IT staff to improve system security.

Your role as a leader:

Actively seek out developmental opportunities for growth, act as strong brand ambassadors for the firm as well as share their knowledge and experience with others.
Understand the goals of our internal and external stakeholder to set personal priorities as well as align their teams’ work to achieve the objectives.
Constantly challenge themselves, collaborate with others to deliver on tasks and take accountability for the results.
Build productive relationships and communicate effectively in order to positively influence teams and other stakeholders.
Project integrity and confidence while motivating others through team collaboration as well as recognising individual strengths, differences, and contributions.

Requirements:

If you are someone with:

Bachelor's degree in information security, information systems management, computer science, engineering, or other related discipline.
More than 2 years of experience in information technology, IT audits, or cyber security.
Proven experience as a Penetration Tester or similar role in cybersecurity.
Proficiency in using automated tools and manual testing techniques.
Strong understanding of common vulnerabilities and exploits.
Relevant certifications (e.g., CEH, OSCP, CREST) are a plus.
Excellent problem-solving and analytical skills.
Must be able to work under pressure and produce content to tight timelines.
Ability to self-manage, prioritizing a variety of tasks.

Due to volume of applications, we regret only shortlisted candidates will be notified.

#LI-AN

","hiringOrganization":{"@type":"Organization","name":"Deloitte","sameAs":"https://www.deloitte.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Jakarta, ID","addressCountry":"Indonesia","addressRegion":"Asia/Pacific"}}}},{"@type":"ListItem","position":49,"item":{"@type":"JobPosting","title":"T&T Consultant - Penetration Tester - PH","datePosted":"2025-08-19","description":"

Are you ready to unleash your potential?

At Deloitte, our purpose is to make an impact that matters for our clients, our people, and the communities we serve.

Hence, we seek talented individuals driven to excel and innovate, working together to achieve our shared goals.

We are committed to creating positive work experiences that foster a culture of respect and inclusion, where diverse perspectives are celebrated, and everyone is recognised for their contributions.

Ready to unleash your potential with us? Join the winning team now!

Work you'll do:

Conduct security assessments on systems, networks, and applications.
Simulate cyber attacks to identify system vulnerabilities.
Typical security testing activities include:\n
- Software/Web Application/Web Services penetration testing
- Network Penetration Testing
- Mobile Application Penetration Testing
- Thick Client Penetration Testing
\n
Develop and execute penetration testing methodologies.
Prepare detailed reports on the findings of penetration tests.
Recommend and implement improvements to security policies.
Stay updated with the latest penetration testing tools and techniques.
Train staff on security awareness and procedures.
Collaborate with IT staff to improve system security.

Your role as a leader:

Actively seek out developmental opportunities for growth, act as strong brand ambassadors for the firm as well as share their knowledge and experience with others.
Understand the goals of our internal and external stakeholder to set personal priorities as well as align their teams’ work to achieve the objectives.
Constantly challenge themselves, collaborate with others to deliver on tasks and take accountability for the results.
Build productive relationships and communicate effectively in order to positively influence teams and other stakeholders.
Project integrity and confidence while motivating others through team collaboration as well as recognising individual strengths, differences, and contributions.

Requirements:

If you are someone with:

Bachelor's degree in information security, information systems management, computer science, engineering, or other related discipline.
More than 2 years of experience in information technology, IT audits, or cyber security.
Proven experience as a Penetration Tester or similar role in cybersecurity.
Proficiency in using automated tools and manual testing techniques.
Strong understanding of common vulnerabilities and exploits.
Relevant certifications (e.g., CEH, OSCP, CREST) are a plus.
Excellent problem-solving and analytical skills.
Must be able to work under pressure and produce content to tight timelines.
Ability to self-manage, prioritizing a variety of tasks.

Due to volume of applications, we regret only shortlisted candidates will be notified.

#LI-AN

","hiringOrganization":{"@type":"Organization","name":"Deloitte","sameAs":"https://www.deloitte.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Manila, PH","addressCountry":"Philippines","addressRegion":"Asia/Pacific"}}}},{"@type":"ListItem","position":50,"item":{"@type":"JobPosting","title":"T&T Senior Consultant - Penetration Tester - SG","datePosted":"2025-07-16","description":"

Are you ready to unleash your potential?

At Deloitte, our purpose is to make an impact that matters for our clients, our people, and the communities we serve.

Hence, we seek talented individuals driven to excel and innovate, working together to achieve our shared goals.

We are committed to creating positive work experiences that foster a culture of respect and inclusion, where diverse perspectives are celebrated, and everyone is recognised for their contributions.

Ready to unleash your potential with us? Join the winning team now!

Work you'll do:

Conduct security assessments on systems, networks, and applications.
Simulate cyber attacks to identify system vulnerabilities.
Typical security testing activities include:\n
- Software/Web Application/Web Services penetration testing
- Network Penetration Testing
- Mobile Application Penetration Testing
- Thick Client Penetration Testing
\n
Develop and execute penetration testing methodologies.
Prepare detailed reports on the findings of penetration tests.
Recommend and implement improvements to security policies.
Stay updated with the latest penetration testing tools and techniques.
Train staff on security awareness and procedures.
Collaborate with IT staff to improve system security.

Your role as a leader:

Actively seek out developmental opportunities for growth, act as strong brand ambassadors for the firm as well as share their knowledge and experience with others.
Understand the goals of our internal and external stakeholder to set personal priorities as well as align their teams’ work to achieve the objectives.
Constantly challenge themselves, collaborate with others to deliver on tasks and take accountability for the results.
Build productive relationships and communicate effectively in order to positively influence teams and other stakeholders.
Project integrity and confidence while motivating others through team collaboration as well as recognising individual strengths, differences, and contributions.

Requirements:

If you are someone with:

Bachelor's degree in information security, information systems management, computer science, engineering, or other related discipline.
More than 3 years of experience in information technology, IT audits, or cyber security.
Proven experience as a Penetration Tester or similar role in cybersecurity.
Proficiency in using automated tools and manual testing techniques.
Strong understanding of common vulnerabilities and exploits.
Relevant certifications (e.g., CEH, OSCP, CREST) are a plus.
Excellent problem-solving and analytical skills.
Must be able to work under pressure and produce content to tight timelines.
Ability to self-manage, prioritizing a variety of tasks.

Due to volume of applications, we regret only shortlisted candidates will be notified.

#LI-AN

eLearnSecurity Certified Professional Penetration Tester (eCPPTv2)

Offensive Security Certified Professional (OSCP)

GIAC Penetration Tester (GPEN) or GIAC Web Application Penetration Tester (GWAPT)

Join us in building the future of finance.

About the team + role

What you’ll do

What you bring

Bonus points

What we offer

Your Team Responsibilities

Your Key Responsibilities

Your skills and experience that will help you excel

About MSCI

Employment Type

Closing Date

Job Title

Job Description

Please review the following job description:

Responsibilities

Qualifications

Preferred Qualifications

Responsibilities

Qualifications

Preferred Qualifications

Responsibilities

Qualifications

Preferred Qualifications

Responsibilities

Qualifications

Responsibilities

Minimum Qualifications

Required Capabilities

Description

Requirements

Description Hebrew

Requirements Hebrew

Cyber Security (Penetration Tester)

Description

Key Responsibilities

Highly Desired Qualifications

What We Offer You

A Career at HARMAN

Job Description:

Introduction: A Career at HARMAN Digital Transformation Solutions (DTS)

We’re a global, multi-disciplinary team that’s putting the innovative power of technology to work and transforming tomorrow. At HARMAN DTS, you solve challenges by creating innovative solutions.

Combine the physical and digital, making technology a more dynamic force to solve challenges and serve humanity’s needs

Work at the convergence of cross channel UX, cloud, insightful data, IoT and mobility

Empower companies to create new digital business models, enter new markets, and improve customer experience.

About the Role-

What You Will Do

Conduct comprehensive penetration tests on web/mobile/cloud applications, firmware, and hardware devices.

Perform manual security testing beyond automated tools to uncover complex vulnerabilities.

Analize systems and architecture to identify security risks and attack surfaces.

Use industry-standard tools such as Metasploit, Burp Suite, Nmap, Wireshark, Nessus, and custom scripts for exploitation and reconnaissance.

Simulate real-world attack scenarios to evaluate system resilience.

Develop and present detailed reports with proof-of-concept (PoC), risk assessments, and remediation guidance.

Collaborate with development and DevOps teams to suggest secure coding practices and fix vulnerabilities at the root.

Stay up to date with emerging threats, vulnerabilities, and industry trends.

What You Need

8–10 years of hands-on experience in penetration testing (application and hardware).

Strong knowledge of OWASP Top 10, SANS 25, and common vulnerability patterns.

Deep familiarity with exploit frameworks (e.g., Metasploit), reverse engineering, and hardware-level attack techniques (e.g., JTAG, UART, SPI).

Experience analyzing and testing embedded systems, IoT devices, and network appliances.

Ability to explain vulnerabilities to non-security stakeholders with clarity.

Proven experience in crafting custom exploits or payloads.

Solid understanding of secure development lifecycle (SDLC) and CI/CD pipeline integration.

Certifications like OSCP, OSCE, GPEN, or similar are a strong plus.

What is Nice to Have

Knowledge of containerized environments.

Familiarity with secure boot, firmware integrity, and hardware encryption modules.

Contribution to bug bounty platforms or CVE submissions.

What Makes You Eligible

Any offer of employment is conditioned upon the successful completion of a background investigation and drug screen.

Dedicated performer & team player with the ability to advocate appropriately for product quality.

Relentless learner with a dedication to learn new technologies and test methods

Self-driven and Innovative to drive continuous improvements in Test process

Resourcefulness in triaging problems and coordinating with multiple teams for issue resolution

Strong written, verbal communication and inter personal relationship skills

You Belong Here

About HARMAN: Where Innovation Unleashes Next-Level Technology

Set your job search on autopilot

Penetration Tester Jobs

Penetration Tester

Penetration Tester

Penetration Tester

Penetration Tester

Penetration tester

Penetration Tester

Penetration Tester

Game Penetration Tester

Penetration Tester (Cybersecurity)

Penetration Tester III

Penetration Tester II

Lead Penetration Tester

Penetration Tester I

Senior Penetration Tester

Senior Penetration Tester

Senior Penetration Tester

Senior Penetration Tester

Senior Penetration Tester

Senior Penetration Tester

Penetration Tester 3

Junior Penetration Tester

Senior Penetration Tester

Cyber Security (Penetration Tester)

Senior Penetration Tester-Security

Jr Cyber Penetration Tester

Senior Cyber Penetration Tester

Penetration Tester-Remote India

Senior Cybersecurity Penetration Tester

Security Engineer - Penetration Tester

Senior Penetration Tester-Security

Senior Security Penetration Tester

Web Application Penetration Tester

Penetration Tester-Remote India

Senior Penetration Tester- InfoSec

Penetration tester / Security Analyst x1

Assistant Vice President, Penetration Tester

Junior Penetration Tester (part-time)

Penetration Tester - Cyber Security Supervisor

Penetration Tester Senior Associate, Global

Penetration Tester - Cyber Security Supervisor

Exploit Developer/Penetration Tester 2/3

Senior Penetration Tester / Adversary Simulation Specialist

Senior Penetration Tester - Prague (EU Secret)

Senior Penetration Tester / Adversary Simulation Specialist

T&T Consultant - Penetration Tester - SG

T&T Consultant - Penetration Tester - SG

T&T Consultant - Penetration Tester - SG

T&T Consultant - Penetration Tester - ID

T&T Consultant - Penetration Tester - PH

T&T Senior Consultant - Penetration Tester - SG