Penetration Tester

Job not on LinkedIn

🔥 12 hours ago

🐊 Florida – Remote

🐊 Florida – Remote

💵 $120 - $160 / hour

⏳ Contract/Temporary

🟡 Mid-level

🟠 Senior

🔧 QA Engineer (Quality Assurance)

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Velero

WebsiteLinkedInAll Job Openings

11 - 50 employees

Founded 2024

🔒 Cybersecurity

📋 Compliance

💼 Consulting

Cybersecurity • Compliance • Consulting

Velero is a cybersecurity and compliance consulting firm that provides managed advisory and technical services to businesses of all sizes. Their offerings include offensive security and penetration testing, compliance advisory and assessments (SOC 2, HIPAA, NIST, ISO, PCI DSS, HITRUST, etc. ), privacy consulting (GDPR, CCPA/CPRA), public sector advisory (CMMC, FISMA, FedRAMP), due diligence and risk management for M&A and third‑party risk, AI security and scalability consulting, virtual CISO/CTO/CIO services, cloud advisory and engineering, and secure code reviews. Velero’s engagements include helping a growing SaaS company achieve SOC 2 certification via gap analysis, remediation roadmaps, controls implementation, and staff training. Based in Tampa, FL, they position themselves as a partner for organizations seeking to meet regulatory requirements and defend against cyber threats.

📋 Description

• Conduct penetration tests on web applications, mobile applications, and APIs to identify vulnerabilities and potential exploits • Perform internal and external network penetration testing • Implement social engineering techniques, including phishing campaigns, to simulate real-world attacks and identify human-related security risks • Prepare detailed technical reports and provide actionable recommendations • Collaborate with internal teams and external clients on findings, mitigation strategies, and security best practices • Ensure compliance with GDPR, PCI-DSS, SOC 2, and other relevant security standards and regulations • Stay current on emerging threats, vulnerabilities, and security best practices

🎯 Requirements

• Proven experience (3+ years) in penetration testing across web apps, mobile apps, APIs, and network environments • Expertise in internal and external network penetration testing • Knowledge of common security vulnerabilities and attack vectors, including OWASP Top 10 and MITRE ATT&CK • Familiarity with Burp Suite, Nmap, Metasploit, Wireshark, Nessus, and other industry-standard tools • Experience with cloud environments such as AWS, Azure, and Google Cloud is a plus • Strong understanding of GDPR, PCI-DSS, SOC 2, and other regulatory frameworks • Excellent verbal and written communication skills, with the ability to present findings to technical and non-technical audiences • OSCP, CEH, GPEN, or similar certifications are preferred • Experience with mobile security frameworks and tools such as OWASP MSTG • Experience in API security testing, including OAuth and other common API security models • Proficiency in one or more programming/scripting languages such as Python, Bash, or JavaScript

🏖️ Benefits

• Flexible, remote contract opportunity • Flexibility of remote work with a nearshore focus • Competitive compensation