Penetration Tester

A-LIGNUnited States only

Apply now

Opens the original posting on Himalayas.

Apply now Source: Himalayas

Apply on the original site

Companies in this catalog do not charge applicants. Never send money to apply.

About the Role

The Penetration Tester works to execute offensive security activities for Pathfynder by A-LIGN . In this role, you will be responsible for the delivery of external network, web application, and API penetration testing engagements. As the Penetration Tester, you will provide exceptional technical and client-focused testing strategies to help support the continued growth of our fast-paced company. A-LIGN will depend on you as the Penetration Tester to independently identify and validate real-world security risks, manually exploit vulnerabilities, document findings, and communicate practical remediation guidance to clients.

Reports to

Loading job…

Penetration Tester at A-LIGN · ApplyPick

Execute external network, web application, and API penetration testing engagements
Identify, validate, and manually exploit vulnerabilities using public exploits, custom-developed exploits, or a combination of techniques
Evaluate findings in context, develop realistic attack paths, and accurately assess business and technical risk
Deliver clear, accurate, client-ready reports that explain findings, risk ratings, evidence, and actionable remediation guidance
Communicate technical issues, testing results, and remediation recommendations to client stakeholders
Maintain project quality and timelines while executing assigned engagements with minimal oversight
Collaborate with the offensive security team to evaluate tools, improve delivery methods, and share technical knowledge
Mentor junior testers and contribute to the development of team capabilities and repeatable testing practices
Minimum Qualifications
EDUCATION
Degree inin cybersecurity, computer science, a related discipline, or equivalent professional experience
EXPERIENCE
5+ years of hands-on offensive security experience, including at least 3 years focused on external network, web application, or API penetration testing
Experience performing web application penetration testing using black-box, grey-box, and white-box approaches
Experience testing APIs, including REST, GraphQL, SOAP, or gRPC
Proven ability to manage engagements from scoping and execution through reporting and client debriefs.
Working knowledge of OWASP WSTG, OWASP ASVS, OWASP API Security Top 10, and PTES
Consulting or client-facing security delivery experience is preferred
Mobile application penetration testing experience across iOS or Android is preferred
White-box or source-code-assisted testing experience is preferred
CERTIFICATIONS
Required at least one of the following: OSCP/OSCP+, OSWA, eWPT, HTB CWES, TCM PWPP, GWAPT, GPEN, or CREST CRT
Preferred: OSWE, HTB CWEE, BSCP, eWPTX, CREST CCT APP, TCM PWPE, OSEP, or GXPN
Published CVEs, conference presentations, or meaningful contributions to open-source security tooling may be considered in place of certifications
SKILLS
Advanced manual testing skills, including the ability to chain lower-severity findings into high-impact attack paths

Penetration Tester

Apply now

About the Role

Penetration Tester

Apply now

About the Role

Responsibilities

Benefits

Healthcare, Dental, and Vision Benefits

Pet Insurance

Technology Allowance

Certification Reimbursement

Generous Paid Time Off

Summer Hours

About Pathfynder by A-LIGN

Apply now