Penetration Tester

Job not on LinkedIn

🔥 1 minute ago

🇺🇸 United States – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

🔧 QA Engineer (Quality Assurance)

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Align Technology

WebsiteLinkedInAll Job Openings

10,000+ employees

Founded 1997

🏥 Healthcare

🏭 Manufacturing

🧬 Biotechnology

💰 $105M Series D on 2000-06

Healthcare • Manufacturing • Biotechnology

Align Technology is a global medical device company that is changing lives through better smiles. The company reimagines and reinvents orthodontic and restorative treatment delivery for millions of people worldwide with its advanced technology solutions such as the Invisalign® System, the most advanced clear aligner system trusted by approximately 18. 9 million people globally. Align Technology also offers iTero™ intraoral scanners to enhance the dental practice experience by improving clinical precision and patient interaction. As a leading player in its industry, Align Technology is committed to international expansion and strategic growth while fostering a diverse and innovative work culture.

📋 Description

• Execute external network, web application, and API penetration testing engagements • Identify, validate, and manually exploit vulnerabilities using public exploits, custom-developed exploits, or a combination of techniques • Evaluate findings in context, develop realistic attack paths, and assess business and technical risk • Deliver clear, accurate, client-ready reports explaining findings, risk ratings, evidence, and actionable remediation guidance • Communicate technical issues, testing results, and remediation recommendations to client stakeholders • Maintain project quality and timelines with minimal oversight • Collaborate with the offensive security team to evaluate tools, improve delivery methods, and share technical knowledge • Mentor junior testers and contribute to team capabilities and repeatable testing practices • Report to the Director, Web Application & External Offensive Operations

🎯 Requirements

• Degree in cybersecurity, computer science, a related discipline, or equivalent professional experience • 5+ years of hands-on offensive security experience, including at least 3 years focused on external network, web application, or API penetration testing • Experience performing web application penetration testing using black-box, grey-box, and white-box approaches • Experience testing APIs, including REST, GraphQL, SOAP, or gRPC • Proven ability to manage engagements from scoping and execution through reporting and client debriefs • Working knowledge of OWASP WSTG, OWASP ASVS, OWASP API Security Top 10, and PTES • Required at least one of: OSCP/OSCP+, OSWA, eWPT, HTB CWES, TCM PWPP, GWAPT, GPEN, or CREST CRT • Advanced manual testing and web exploitation skills • Knowledge of external attack surfaces, OSINT, asset discovery, edge-device exploitation, and SSO or MFA attack techniques • Proficiency with Python, Bash, JavaScript, PowerShell, or Go • Proficiency with Burp Suite, Caido, Nmap, Nuclei, SQLmap, ffuf, Postman, and Nessus • Familiarity with Laravel, Express.js, ASP.NET Core, Spring, and Django • Ability to write clear, concise, client-ready reports with accurate risk ratings and actionable remediation guidance • Excellent verbal and written communication skills • Ability to work independently and collaboratively in a fast-paced, remote environment while meeting deadlines • Published CVEs, conference presentations, or meaningful contributions to open-source security tooling may be considered in place of certifications • Consulting or client-facing security delivery experience is preferred • Mobile application penetration testing experience across iOS or Android is preferred • White-box or source-code-assisted testing experience is preferred • Experience assessing AI or LLM-integrated applications is preferred • Familiarity with OWASP Top 10 for LLM Applications and cloud attack surfaces across AWS, Azure, or GCP is preferred

🏖️ Benefits

• Healthcare, Dental, and Vision Benefits • Employer Paid Life Insurance and Disability Insurance • EAP - Employee Assistance Program • Pet Insurance • 401(k) Plan with Employer Matching • Competitive Bonus Structure • Technology Allowance • Certification Reimbursement • Personalized Career Coaching • Generous Paid Time Off • Paid Office Closure December 25-January 1 • Vacation Bonus • Summer Hours