Penetration Tester

Job not on LinkedIn

🔥 13 hours ago

🇺🇸 United States – Remote

⏰ Full Time

🟢 Junior

🟡 Mid-level

🔧 QA Engineer (Quality Assurance)

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Align Technology

WebsiteLinkedInAll Job Openings

10,000+ employees

Founded 1997

🏥 Healthcare

🏭 Manufacturing

🧬 Biotechnology

💰 $105M Series D on 2000-06

Healthcare • Manufacturing • Biotechnology

Align Technology is a global medical device company that is changing lives through better smiles. The company reimagines and reinvents orthodontic and restorative treatment delivery for millions of people worldwide with its advanced technology solutions such as the Invisalign® System, the most advanced clear aligner system trusted by approximately 18. 9 million people globally. Align Technology also offers iTero™ intraoral scanners to enhance the dental practice experience by improving clinical precision and patient interaction. As a leading player in its industry, Align Technology is committed to international expansion and strategic growth while fostering a diverse and innovative work culture.

📋 Description

• Execute external network, web application, and API penetration testing engagements according to defined scopes, methodologies, and rules of engagement • Identify, validate, and manually exploit vulnerabilities using public exploits, internally developed techniques, or both • Evaluate attack paths and determine the potential business and technical impact of vulnerabilities • Write clear, accurate, and defensible client reports explaining findings, risk, evidence, and remediation guidance • Communicate with clients throughout engagements, including technical discussions, findings walkthroughs, and responses to questions or challenges • Execute assigned projects with minimal oversight while maintaining quality, professionalism, and attention to detail • Collaborate with team members to evaluate offensive security tools and improve testing methodologies, delivery processes, and reporting standards • Share technical knowledge and practical guidance with less-experienced team members and clients when appropriate • Maintain current knowledge of emerging vulnerabilities, attack techniques, security research, and industry trends • Report to the Director, Web Application & External Offensive Operations

🎯 Requirements

• Master’s or Bachelor’s degree in cybersecurity, management information systems, computer science, or relevant discipline • 2-5 years of hands-on penetration testing experience in at least one of the following areas: External Penetration Tests, Web Application Penetration Tests, API Penetration Tests, or Mobile Application Penetration Tests • Experience independently executing penetration testing engagements and producing high-quality client deliverables • Knowledge of established penetration testing methodologies and disciplined evidence collection practices • Experience identifying and manually validating exploitable vulnerabilities rather than relying solely on automated scanning • Experience communicating technical findings, risk, and remediation guidance clearly to clients and internal stakeholders • Proficiency with commonly used offensive security tools such as Nmap, SQLmap, Burp Suite, Postman, Nuclei, Wireshark, Nessus, and Caido • Proficiency with one or more scripting languages such as Python, Bash, JavaScript, PowerShell, or SQL • Solid understanding of web technologies, networking concepts, authentication, access control, and common application security weaknesses • Ability to work independently as well as collaboratively in a remote, fast-paced environment • Excellent written and verbal communication skills, with the ability to explain technical issues to different audiences • Ability to meet deadlines while maintaining a high degree of motivation, self-discipline, and quality • Preferred OSCP, eWPT, eWPTX, OSWA, or OSWE certification

🏖️ Benefits

• Healthcare, Dental, and Vision Benefits • Employer Paid Life Insurance and Disability Insurance • EAP - Employee Assistance Program • Pet Insurance • 401(k) Plan with Employer Matching • Competitive Bonus Structure • Tech Allowance • Certification Reimbursement • Personalized Career Coaching • Generous Paid Time Off • Paid Office Closure December 25-January 1 • Vacation Bonus • Summer Hours