Penetration Tester

Packetlabs

. Perform penetration testing of web applications, mobile applications, thick clients, and APIs .

Posted 11/9/2026full-timeRemote • United StatesJuniorMid-Level💰 $80,000 - $120,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in penetration testing, including web applications, mobile applications, and APIs, with a strong focus on identifying and remediating application flaws. Proficient in using tools like Burp Suite and conducting source code reviews while maintaining effective communication with clients and stakeholders.

Highest-signal resume keywords

Penetration TestingBurp SuiteC, C#, Python, Objective-C, Java, JavaScript, SQLOSCP CertificationOWASP Understanding

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Penetration TestingSource Code ReviewSASTDASTReverse EngineeringApplication SecurityAPI TestingWeb Application TestingMobile Application TestingCloud Security

Soft Skills

Strong CommunicationCustomer-First MentalitySelf-MotivatedDependableAdaptable

Tools & Technologies

Burp SuiteAttack ProxyScannersXMLJSONSOAPRESTAJAX

Certifications & Qualifications

OSCPOSWEBSCP

Industry Keywords

Information SecurityApplication FlawsAI/LLM WeaknessesActive DirectoryContinuous Learning

Tech Stack

Tools & technologies

AngularCloudJavaJavaScriptObjective-CPythonSOAPSQL

About the role

Key responsibilities & impact

Perform penetration testing of web applications, mobile applications, thick clients, and APIs
Conduct source code reviews and white-box penetration testing to prove application-flaw impact
Reverse engineer mobile and thick-client applications
Chain application flaws into cloud and on-premises Active Directory infrastructure
Develop detailed reports on findings and remediations
Debrief findings at technical and executive levels
Perform SAST and DAST on enterprise, SaaS, and custom in-house applications
Use scanners and validate or eliminate false positives
Continuously learn new ways to evade controls and identify overlooked weaknesses

Requirements

What you’ll need

Customer-first mentality and strong communication with clients, project managers, and teammates
Solid working knowledge of C, C#, Python, Objective-C, Java, JavaScript, SQL, and AngularJS
Familiarity with XML, JSON, SOAP, REST, and AJAX
Understanding of AI/LLM weaknesses and application flaws
Extensive experience using an attack proxy such as Burp Suite
3–5 years of penetration testing and consulting experience preferred
Post-secondary college or university degree
At least two years of experience with information security-related tasks
Professional qualification(s): OSCP, OSWE, or BSCP
OSCP or Burp is mandatory
Must be located in Florida or Texas
Strong understanding of OWASP for Web, API, Mobile, and AI/LLM
Self-motivated, dependable, humble, adaptable, and committed to continuous learning

Benefits

Comp & perks

Competitive compensation
Paid education and professional development reimbursement for continued learning, certifications and technical growth
Flexible work environment
Paid volunteer day each year
Paid birthday day off
Paid U.S. public holidays