Associate Penetration Tester
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Associate Penetration Tester conducting network, application, and social engineering tests for FRSecure, an information security consultancy. Documenting vulnerabilities and advising clients on remediation.
Responsibilities:
- Provide security posture validation through penetration testing of systems on client networks
- Execute external penetration tests, including reconnaissance, enumeration of internet-facing systems and services, vulnerability identification, reporting, and client delivery
- Conduct internal penetration tests of client networks
- Perform application penetration tests of client applications
- Execute social engineering tests, including reconnaissance, campaign pretext design, phishing emails, spoofed logon forms, reporting, and client delivery
- Lead vulnerability assessments and remediation consulting
- Perform vulnerability scans, generate scan reports, and advise on remediation
- Document testing methodologies, technical findings, proof-of-concept evidence, attack chains, and business impact in professional reports
- Stay current on emerging threats, attack techniques, tools, and industry trends through research, training, certifications, lab work, and knowledge sharing
- Maintain compliance with internal quality standards, client confidentiality requirements, and OWASP, PTES, NIST, and MITRE ATT&CK frameworks and methodologies
- Review colleagues’ reports for formatting and narrative errors and provide feedback
- Work alongside experienced security consultants
- Periodically work outside standard hours to accommodate United States client time zones
- Occasionally travel for on-site client visits, projects, and team or company activities
Requirements:
- Associates degree in related field required, or equivalent combination of education, certification and experience
- Minimum of 1-2 years of experience managing IT systems in a professional environment required
- CEH, Net+ or similar IT or security industry recognized certification preferred
- General knowledge of Networks, Linux systems, Windows systems, web applications, and scripting languages
- Familiarity with common attack tools, concepts, and frameworks used for reconnaissance, enumeration, vulnerability identification, exploitation, and reporting
- Excellent verbal and written communication skills
- Ability to clearly document technical findings, develop client-ready deliverables, and present complex information professionally
- Demonstrated commitment to exceptional customer service and effective client relationship management
- Ability to translate technical security concepts, risks, and remediation recommendations for business stakeholders and non-technical audiences
- Strong analytical and critical-thinking skills
- Ability to evaluate security weaknesses, validate findings, and recommend practical risk mitigation strategies
- Effective organizational and time management skills
- Ability to manage multiple projects and competing deadlines while maintaining attention to detail
- Proficient with all Microsoft Office Suite products
- Must be located in one of the specified United States states
Benefits:
- Flexible schedules and remote or hybrid work options
- Employee Assistance Program (EAP)
- Mental wellbeing support
- Ongoing learning opportunities and professional development support
- Medical, dental and vision insurance
- Health savings, flexible savings and dependent care savings account options
- Life and disability insurance
- 401(k) with employer match up to 4%
- Pet insurance
- Unlimited paid time off
- Paid parental leave: 6 weeks for non-birthing parents and 12 weeks for birthing parents at 100% regular, straight time weekly pay
- 11 paid holidays
- Volunteer time off
- Flexible working schedule outside scheduled meetings
- Minimal travel, less than 5%
Similar Jobs
QA Engineer
QA Engineer ensuring functional quality through Playwright-based regression and E2E automation. Supporting ARKHO’s digital transformation, AI, data, and managed services offerings.
Clinical Quality Assurance Coordinator
Clinical Quality Assurance Coordinator reviewing peer-review reports for MES Solutions, a provider of independent medical examinations and peer-review services. Ensuring clinical accuracy, regulatory compliance, and report quality remotely.
QA Lead
QA Lead validating settlement integrity, payment flows, and RPC security for an AI-driven real-money platform. Building traceable test coverage and leading a QA pod.
Quality Assurance Analyst
Quality Assurance Analyst auditing files, communications, and processes for Dovenmuehle, a mortgage subservicing firm. Analyzing compliance findings and recommending corrective actions and process improvements.
Senior QA Engineer – Mobile, Web
Senior QA Engineer owning release readiness for React Native mobile and React web products. Investigating defects with SQL, APIs, logs, and application code.
Principal Software Tester
Software Tester Principal building Playwright UI and API test automation for SAIC’s defense, space, intelligence, and civilian technology solutions. Supporting CI/CD quality, defect tracking, and testing standards.
Senior Software Tester
Senior Software Tester automating UI and API quality assurance for SAIC’s mission-critical technology solutions. Building Playwright frameworks and supporting CI/CD release quality.
Quality Assurance Lead Analyst
Quality assurance lead analyzing customer escalations and CAPA trends for Airspace, an AI-powered time-critical freight logistics company. Driving corrective actions and quality improvements across Operations.
QA, Mandarin
Quality Checker reviewing and correcting Mandarin call-transcript annotations for DataForce by TransPerfect. Ensuring accurate labeling, guideline compliance, and appropriate PII redaction.
Software Quality Engineering Manager
Software Quality Engineering Manager leading SDET teams and AI-native testing for Unifonic’s customer experience platform. Owning automation, release quality, and testing strategy across web, mobile, and agentic products.
QA Engineer II
QA Engineer II testing MPulse web, API, and database platforms. Creating test plans, tracking JIRA defects, and supporting production troubleshooting.
Farsi Linguistic Tester – Mac M-Series Required
Freelance Farsi linguistic tester reviewing AI-generated content and Farsi software interfaces for Acclaro. Reporting linguistic, layout, and functional issues in English.
Senior Manager, Quality Engineering
Senior Manager leading test infrastructure and quality engineering for Samsara’s Connected Operations Cloud. Scaling automation, quality platforms, and release confidence for IoT customers.
Quality Assurance Engineer
Quality Assurance Engineer testing Beacon Funding’s lending systems and customer portals. Combining manual, automated, and AI-assisted testing within Agile Scrum teams.
Senior Software Quality Assurance Engineer
Senior QA Engineer testing applications, databases, and enterprise technology for Mano Lani LLC. Developing test plans, tracking defects, and validating software releases.
Middle General QA Engineer
General QA Engineer manually testing gambling-sector web and hybrid applications. Owning quality processes, exploratory testing, documentation, automation, and release support.
Senior QA Automation, Javascript
Senior QA Automation Engineer owning frontend and backend test automation for an innovative fintech company. Coordinating releases, improving coverage, and validating deployments in Argentina.
Senior Product QA
Senior Product QA ensuring quality for Saaf AI’s AI-powered mortgage operations infrastructure. Validating user journeys, AI outputs, and release readiness through data-informed testing.
Audio Quality Assurance Reviewer – Turkish
Turkish Audio Quality Assurance Reviewer evaluating pronunciation, speech style, and recording defects. Supporting DataForce by TransPerfect’s language and machine-learning data projects.
QA Engineer – Internship
QA Engineering Intern testing Moniepoint’s payments, banking, credit, and business-management software. Performing pre-deployment testing and tracking application defects.