Senior Penetration Tester

Forward Financing

. Conduct manual penetration tests against company systems .

Posted 10/20/2026full-timeRemote • United StatesSenior💰 $143,000 - $183,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in application security and offensive security with a focus on manual penetration testing, secure code reviews, and AI security testing. Proficient in modern programming languages and secure SDLC practices, with the ability to communicate risks effectively to technical teams.

Highest-signal resume keywords

Manual Penetration TestingSecure Code ReviewAWS Infrastructure SecurityAI Security TestingOffensive Security Certifications

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Penetration TestingSecure SDLC PracticesCode ReviewAI/LLM Attack Surface UnderstandingModern Programming LanguagesTriage SAST FindingsAutomation Tooling DevelopmentRisk CommunicationVulnerability RemediationAgentic Systems Testing

Soft Skills

CuriosityCommunication

Tools & Technologies

AI-Assisted ToolingForward Application StackWeb ApplicationsAPIsCloud Infrastructure

Certifications & Qualifications

OSCPOSWE

Industry Keywords

Application SecurityOffensive SecurityProduct SecurityFintechRegulated Environments

Tech Stack

Tools & technologies

AWSCloudPythonRubySDLCTypeScriptGo

About the role

Key responsibilities & impact

Conduct manual penetration tests against company systems
Build AI-assisted tooling and automation to expand penetration-test coverage
Define and implement testing approaches for LLM applications, agents, and agent-generated code
Triage SAST findings, remediate real vulnerabilities, and tune false-positive rules
Perform secure code reviews across web applications, APIs, and AWS infrastructure
Build tooling and security services within the Forward application stack
Support test-to-production security reviews for AI-built work
Explain risk and priorities to security and software engineers
Help establish standards for the company's growing security function and AI security testing program

Requirements

What you’ll need

5+ years in application security, offensive security, or product security
Hands-on pentesting and code-review depth across web applications, APIs, and cloud infrastructure (AWS)
A hacker mentality and curiosity about how systems break
Interest in using AI to solve problems
Understanding of AI/LLM attack surface, including prompt injection, insecure agent tool use, and vulnerabilities characteristic of AI-generated code
Experience with modern programming languages such as Ruby, Python, TypeScript, or Go
Experience with secure SDLC practices
Ability to communicate risk and priorities to security and software engineers
Typically has a Bachelor's Degree in Computer Science or equivalent technical degree, or equivalent industry experience
OSCP/OSWE or comparable offensive certifications is nice to have
Experience pentesting or red-teaming LLM applications and agentic systems is nice to have
Experience contributing to bug-bounty or external testing programs is nice to have
Background in fintech or other regulated environments is nice to have
Must be authorized to work for any employer in the United States
Must answer whether current or future sponsorship will be required

Benefits

Comp & perks

Medical insurance
Dental insurance
Vision insurance
Commuter benefits
Flexible time-off policy
Paid parental leave
401k match for US employees
Wellness reimbursement
Volunteering days
Annual professional development budget
Charitable donation match
Flexible working arrangements: work from home, in the office, or a combination of both
Flexible hours
Virtual and in-person team events and celebrations
10% annual target bonus