Penetration Tester

🕒 October 5

🤠 Texas – Remote

🤠 Texas – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

🔧 QA Engineer (Quality Assurance)

👻 Ghost score 12%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

SAIC

WebsiteLinkedInAll Job Openings

10,000+ employees

Founded 1969

☁️ SaaS

📣 Marketing

🏢 Enterprise

💰 $500M Post-IPO Debt - SAIC on 2025-09

SaaS • Marketing • Enterprise

SAIC is represented in the supplied content by marketing and product copy that matches Bitly — a cloud-based link management and QR-code platform. The material describes a SaaS offering for URL shortening, dynamic QR Codes, link analytics, mobile-friendly landing pages, branded links, UTM campaign tracking, digital business cards, developer APIs and AI-enhanced features. It targets marketers, developers, and enterprises across industries (retail, CPG, hospitality, media, healthcare, finance, education) and emphasizes integrations, analytics, and enterprise-grade capabilities. Note: the provided text appears to be Bitly’s website content rather than information about SAIC; if you intended the defense/technology firm SAIC (Science Applications International Corporation), please provide relevant content.

📋 Description

• Deliver penetration tests across client environments using black box, white box, web application, and mobile methodologies aligned to NIST standards • Independently manage engagements from scoping through reporting while maintaining quality • Produce technical reports describing findings, risk context, and actionable remediation guidance for technical and executive audiences • Support mobile application security assessments for iOS and Android using OWASP MASVS/MSTG • Perform strategic planning and management in cybersecurity and digital forensics aligned with the NICE Framework • Address security issues involving architectures, firewalls, electronic data traffic, and network access • Research, evaluate, and recommend security tools, techniques, and technologies • Use COTS/GOTS and custom tools to scan, identify, contain, mitigate, and remediate vulnerabilities and intrusions • Design, develop, and implement security solutions across enterprise engagements • Present technical findings and business risk to developers, CISOs, and other clients • Act as spokesperson and advisor on advanced technical projects and research • Participate with senior management to establish strategic plans and objectives • Share knowledge, improve internal tooling and methodologies, and help close practice skill gaps • Monitor emerging vulnerabilities, attack techniques, and industry developments

🎯 Requirements

• Bachelor’s degree and nine (9) years or more experience; Master’s degree and seven (7) years or more experience; PhD or JD and four (4) years or more related experience • Additional experience considered in lieu of degree • Must be a US Citizen • Must be able to pass a CJIS Criminal Justice background investigation and maintain CJIS clearance throughout employment • Advanced technical knowledge in cybersecurity and digital forensics • Strong working knowledge of OWASP WSTG and OWASP Top 10, including vulnerability discovery and exploitation • Proficiency with Burp Suite Pro, FFUF, SQLMap, and Nuclei • Working familiarity with mobile application testing concepts and tooling, including Frida, Objection, MobSF, and ADB • Proven experience in red-teaming, ethical hacking, and cloud security architecture • Proficiency in malware reverse engineering and enterprise cyber architecture • Strong background in security issues involving architectures, firewalls, electronic data traffic, and network access • Experience researching, evaluating, and recommending security tools and technologies • Proficiency using COTS/GOTS and custom tools for vulnerability management • Ability to write professional, client-ready penetration test reports with minimal revision • GWAPT certification required or strongly preferred; OSCP, OSWE, or GWEB also considered • Preferred: hands-on iOS and/or Android application assessment experience • Preferred: API security testing familiarity with REST, GraphQL, and SOAP • Preferred: source code review exposure in white box engagements • Preferred: experience presenting findings to client stakeholders and senior leadership • Preferred: experience with strategic planning, complex technical problems, consultative direction, advanced technical projects, technological development, and organizational decision-making

🏖️ Benefits

• Equal Opportunity Employer • Intentional growth opportunities • Opportunity to contribute visibly to client and team outcomes • Knowledge-sharing and internal tooling/methodology improvement opportunities

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume