Penetration Tester
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Penetration Tester conducting web, mobile, API, and network assessments for Velero’s cybersecurity and compliance consulting clients. Delivering actionable findings that strengthen security posture and regulatory readiness.
Responsibilities:
- Conduct penetration tests on web applications, mobile applications, and APIs to identify vulnerabilities and potential exploits
- Perform internal and external network penetration testing
- Implement social engineering techniques, including phishing campaigns, to simulate real-world attacks and identify human-related security risks
- Prepare detailed technical reports and provide actionable recommendations
- Collaborate with internal teams and external clients on findings, mitigation strategies, and security best practices
- Ensure compliance with GDPR, PCI-DSS, SOC 2, and other relevant security standards and regulations
- Stay current on emerging threats, vulnerabilities, and security best practices
Requirements:
- Proven experience (3+ years) in penetration testing across web apps, mobile apps, APIs, and network environments
- Expertise in internal and external network penetration testing
- Knowledge of common security vulnerabilities and attack vectors, including OWASP Top 10 and MITRE ATT&CK
- Familiarity with Burp Suite, Nmap, Metasploit, Wireshark, Nessus, and other industry-standard tools
- Experience with cloud environments such as AWS, Azure, and Google Cloud is a plus
- Strong understanding of GDPR, PCI-DSS, SOC 2, and other regulatory frameworks
- Excellent verbal and written communication skills, with the ability to present findings to technical and non-technical audiences
- OSCP, CEH, GPEN, or similar certifications are preferred
- Experience with mobile security frameworks and tools such as OWASP MSTG
- Experience in API security testing, including OAuth and other common API security models
- Proficiency in one or more programming/scripting languages such as Python, Bash, or JavaScript
Benefits:
- Flexible, remote contract opportunity
- Flexibility of remote work with a nearshore focus
- Competitive compensation
Similar Jobs
Fullstack QA Engineer – MSME
QA Engineer owning manual testing for Salmon’s mobile, web, and backend fintech products. Testing APIs, releases, browsers, devices, and CI/CD workflows for MSME users.
QA Lead – Insurance
QA Lead Sênior estruturando estratégia, governança e testes para projetos complexos de seguros. Liderando equipes e garantindo qualidade, rastreabilidade e segurança nas entregas.
Senior Insurance Operations Quality Assurance Specialist
Senior QA specialist auditing complex Supplemental Health claims for Horace Mann, an educator-focused insurance and financial services company. Analyzing compliance, trends, and process improvements.
Test Analyst
Test Analyst certifying bank, acquirer and PSP integrations for EPI’s Wero digital wallet. Investigating APIs, logs and distributed services across Europe’s payment network.
Quality Assurance Engineer, Mid-Senior, Mobile
Mobile QA Engineer testing Coveron’s identity theft protection platform across iOS and Android. Building automated tests and supporting secure identity-protection releases.
SAP Business Technology Platform Quality Engineer
SAP BTP Quality Engineer building reusable test automation for Seamless Migration, a company enabling organizations through business automation. Testing BTP services, frameworks, and integrations.
Freelance Software Tester – Smart TVs
Freelance software tester evaluating streaming apps for Testlio, a global software testing company. Executing functional tests and reporting defects on Titan OS Smart TVs.
Freelance Software Tester, Smart TVs
Freelance Smart TV software tester in Germany testing Testlio’s streaming app. Executing functional tests and reporting bugs across Titan OS devices.
Senior QA Engineer
Senior QA Engineer owning Playwright/TypeScript automation and end-to-end quality for Aphex’s construction planning platform. Embedding with product teams to deliver reliable releases.
Mid-Level Quality Engineer
Quality Engineer owning automated testing and quality strategy for webhook integrations. CI&T delivers AI-powered technology transformation and business solutions for large enterprises.
Quality Assurance Supervisor
Quality Assurance Supervisor reviewing workforce-program case files, data, payments, and compliance. Supporting Career Team’s technology-enabled services that help job seekers achieve measurable outcomes.
CAD Survey Technician, QA
Residential CAD survey checker reviewing complex land surveys and coordinating boundary matters. Coaching drafting teams and supporting Professional Land Surveyors at Exacta.
IT QA Manager
IT QA Manager leading people, governance, testing, and automation across Guild Mortgage’s home-financing technology. Driving quality outcomes, delivery confidence, and customer-focused software delivery.
QA Functional Analyst – Temporary
QA Functional Analyst validating business workflows, transactions, and data across application layers. Testing AI-powered solutions for Applaudo under a temporary three-month engagement.
Senior Functional QA Engineer – SaaS Billing Integrations
Senior Functional QA Engineer testing SaaS billing, subscription, API, and cloud-data integrations at Applaudo. Creating test strategies and validating workflows, defects, and data parity.
Test Analyst
Test Analyst ensuring quality across lending and business workflow software. Executing functional, integration, regression, and defect-management activities.
AI Quality Engineer
AI Quality Engineer validating xCures’ clinical data extraction platform for healthcare decision-making. Leading quality control, regulatory alignment, performance reporting, and clinical data governance.
Quality Assurance Data Analyst
Quality Assurance Data Analyst validating complex SQL-driven datasets for Paradigm’s legal-services client Epiq. Testing imports, transformations, extracts, and database processes for accuracy.
Quality Assurance Engineer
Quality Assurance Engineer owning automated and manual testing for federal health supply-chain software. Building CI/CD regression suites and assessing release readiness for Latitude’s government customers.
Penetration Tester – Infrastructure, Red Team
Packetlabs penetration tester conducting infrastructure, cloud, and red team assessments. Identifying vulnerabilities, simulating adversaries, and delivering technical guidance to clients.