FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Penetration Tester
Align Technology. Execute external network, web application, and API penetration testing engagements .
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates extensive experience in offensive security, particularly in external network, web application, and API penetration testing. Proficient in delivering detailed reports and actionable remediation guidance while effectively communicating technical findings to stakeholders.
Highest-signal resume keywords
5+ Years Offensive Security ExperienceWeb Application Penetration TestingAPI Testing (REST, GraphQL, SOAP, gRPC)OSCP/OSCP+/OSWA/eWPT CertificationAdvanced Manual Testing Skills
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Penetration TestingVulnerability ExploitationRisk AssessmentAttack Path DevelopmentWeb ExploitationOSINTAsset DiscoveryMobile Application TestingAI Application AssessmentSource-Code-Assisted Testing
Soft Skills
Clear CommunicationMentoringCollaborationIndependent WorkTime Management
Tools & Technologies
Burp SuiteNmapSQLmapPostmanNessusPythonBashJavaScriptPowerShellGo
Certifications & Qualifications
OSCPOSCP+OSWAEWPTHTB CWESTCM PWPPGWAPTGPENCREST CRT
Industry Keywords
OWASP WSTGOWASP ASVSOWASP API Security Top 10PTESOWASP Top 10 for LLM ApplicationsCloud Attack SurfacesAWSAzureGCP
Tech Stack
Tools & technologiesAndroidASP.NETAWSAzureCloudCyber SecurityDjangoGoogle Cloud PlatformGraphQLGRPCiOSJavaScriptLaravelPythonSOAPSpringGo.NET
About the role
Key responsibilities & impact- Execute external network, web application, and API penetration testing engagements
- Identify, validate, and manually exploit vulnerabilities using public exploits, custom-developed exploits, or a combination of techniques
- Evaluate findings in context, develop realistic attack paths, and assess business and technical risk
- Deliver clear, accurate, client-ready reports explaining findings, risk ratings, evidence, and actionable remediation guidance
- Communicate technical issues, testing results, and remediation recommendations to client stakeholders
- Maintain project quality and timelines with minimal oversight
- Collaborate with the offensive security team to evaluate tools, improve delivery methods, and share technical knowledge
- Mentor junior testers and contribute to team capabilities and repeatable testing practices
- Report to the Director, Web Application & External Offensive Operations
Requirements
What you’ll need- Degree in cybersecurity, computer science, a related discipline, or equivalent professional experience
- 5+ years of hands-on offensive security experience, including at least 3 years focused on external network, web application, or API penetration testing
- Experience performing web application penetration testing using black-box, grey-box, and white-box approaches
- Experience testing APIs, including REST, GraphQL, SOAP, or gRPC
- Proven ability to manage engagements from scoping and execution through reporting and client debriefs
- Working knowledge of OWASP WSTG, OWASP ASVS, OWASP API Security Top 10, and PTES
- Required at least one of: OSCP/OSCP+, OSWA, eWPT, HTB CWES, TCM PWPP, GWAPT, GPEN, or CREST CRT
- Advanced manual testing and web exploitation skills
- Knowledge of external attack surfaces, OSINT, asset discovery, edge-device exploitation, and SSO or MFA attack techniques
- Proficiency with Python, Bash, JavaScript, PowerShell, or Go
- Proficiency with Burp Suite, Caido, Nmap, Nuclei, SQLmap, ffuf, Postman, and Nessus
- Familiarity with Laravel, Express.js, ASP.NET Core, Spring, and Django
- Ability to write clear, concise, client-ready reports with accurate risk ratings and actionable remediation guidance
- Excellent verbal and written communication skills
- Ability to work independently and collaboratively in a fast-paced, remote environment while meeting deadlines
- Published CVEs, conference presentations, or meaningful contributions to open-source security tooling may be considered in place of certifications
- Consulting or client-facing security delivery experience is preferred
- Mobile application penetration testing experience across iOS or Android is preferred
- White-box or source-code-assisted testing experience is preferred
- Experience assessing AI or LLM-integrated applications is preferred
- Familiarity with OWASP Top 10 for LLM Applications and cloud attack surfaces across AWS, Azure, or GCP is preferred
Benefits
Comp & perks- Healthcare, Dental, and Vision Benefits
- Employer Paid Life Insurance and Disability Insurance
- EAP - Employee Assistance Program
- Pet Insurance
- 401(k) Plan with Employer Matching
- Competitive Bonus Structure
- Technology Allowance
- Certification Reimbursement
- Personalized Career Coaching
- Generous Paid Time Off
- Paid Office Closure December 25-January 1
- Vacation Bonus
- Summer Hours