Mid-Level Penetration Tester

🔥 2 minutes ago

🤠 Texas – Remote

🤠 Texas – Remote

⏰ Full Time

🟢 Junior

🟡 Mid-level

🔧 QA Engineer (Quality Assurance)

👻 Ghost score 10%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.Why this score:

• Just posted.
• Jobs at this company usually fill in 21 days.
• No salary listed.

Apply Now

Find Similar Remote Jobs

SAIC

WebsiteLinkedInAll Job Openings

10,000+ employees

Founded 1969

☁️ SaaS

📣 Marketing

🏢 Enterprise

💰 $500M Post-IPO Debt - SAIC on 2025-09

SaaS • Marketing • Enterprise

SAIC is represented in the supplied content by marketing and product copy that matches Bitly — a cloud-based link management and QR-code platform. The material describes a SaaS offering for URL shortening, dynamic QR Codes, link analytics, mobile-friendly landing pages, branded links, UTM campaign tracking, digital business cards, developer APIs and AI-enhanced features. It targets marketers, developers, and enterprises across industries (retail, CPG, hospitality, media, healthcare, finance, education) and emphasizes integrations, analytics, and enterprise-grade capabilities. Note: the provided text appears to be Bitly’s website content rather than information about SAIC; if you intended the defense/technology firm SAIC (Science Applications International Corporation), please provide relevant content.

📋 Description

• Independently perform penetration testing engagements against web applications, networks, APIs, mobile applications, wireless environments, and cloud-hosted systems using black-box and white-box methodologies • Conduct testing aligned with NIST, OWASP, PTES, and industry-recognized security assessment frameworks • Develop attack paths, validate vulnerabilities, and demonstrate exploitability while maintaining engagement objectives and timelines • Manage assigned engagements from planning and scoping through execution, reporting, and customer debriefs • Coordinate with senior team members, project managers, and clients to ensure successful assessment delivery • Provide technical guidance and mentorship to junior team members when appropriate • Produce comprehensive technical reports communicating vulnerabilities, business impact, attack scenarios, and remediation recommendations • Present findings to technical teams, management, and executive stakeholders • Assist customers with risk prioritization and remediation strategies • Conduct web application assessments using OWASP WSTG and OWASP Top 10 methodologies • Perform API security assessments involving REST, GraphQL, SOAP, and modern authentication mechanisms • Conduct mobile application security testing on iOS and Android • Participate in source code reviews and secure code assessments • Utilize commercial, government, open-source, and custom security tools • Develop and maintain scripts, utilities, and testing methodologies • Evaluate emerging attack techniques, vulnerabilities, and security technologies • Communicate technical findings in technical and business-focused terms • Present assessment outcomes and remediation guidance during customer briefings and readouts • Build and maintain positive customer relationships • Remain current on evolving threats, offensive security techniques, vulnerabilities, and best practices • Contribute to research, methodology enhancements, tool development, and knowledge-sharing activities • Support cybersecurity capability growth aligned to the NICE Cybersecurity Workforce Framework

🎯 Requirements

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related field; equivalency through relevant experience will be considered • Ability to successfully pass a CJIS Criminal Justice background investigation and maintain CJIS eligibility throughout employment • One or more industry-recognized penetration testing certifications preferred, such as OSCP, GWAPT, PNPT, GPEN, OSEP, OSWE, PenTest+, and eJPT/eCPPT • 5+ years of hands-on cybersecurity experience, including 2+ years conducting penetration testing or offensive security assessments • Strong knowledge of web application security testing methodologies, including OWASP WSTG and OWASP Top 10 • Experience conducting authenticated and unauthenticated network penetration tests • Proficiency with Burp Suite Professional, Nmap, Nessus/Tenable, Metasploit, and similar platforms • Experience identifying, exploiting, validating, and documenting security vulnerabilities • Working knowledge of network protocols, operating systems, Active Directory, authentication mechanisms, and common enterprise architectures • Experience creating professional technical reports and presenting findings to technical and non-technical audiences • Knowledge of MITRE ATT&CK, NIST, and PTES • Strong analytical, troubleshooting, and problem-solving skills • Preferred: mobile application security assessments using Frida, Objection, MobSF, and ADB • Preferred: API, cloud environment (Azure, AWS, GCP), and containerized application assessments • Preferred: source code review in Java, C#, Python, JavaScript, or Go • Preferred: red team operations, adversary emulation, attack path analysis, scripting or automation, cloud security architectures, digital forensics, malware analysis, reverse engineering, mentoring, security research, bug bounty programs, Capture-the-Flag competitions, or public vulnerability disclosures

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume