Mid-Level Penetration Tester

SAIC

. Independently perform penetration testing engagements against web applications, networks, APIs, mobile applications, wireless environments, and cloud-hosted systems using black-box and white-box methodologies .

Posted 11/10/2026full-timeRemote • Texas • United StatesJuniorMid-LevelWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in penetration testing across various environments, including web applications, networks, and APIs, while utilizing industry-standard methodologies such as OWASP and NIST. Proficient in producing technical reports and presenting findings to diverse audiences, ensuring effective communication of vulnerabilities and remediation strategies.

Highest-signal resume keywords

Penetration TestingOWASP WSTGBurp Suite ProfessionalAPI Security AssessmentsCybersecurity Certifications

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Penetration TestingWeb Application Security TestingNetwork Penetration TestingAPI Security AssessmentsMobile Application Security TestingSource Code ReviewVulnerability AssessmentTechnical Report WritingScriptingSecurity Methodologies

Soft Skills

Analytical SkillsProblem-SolvingCommunication SkillsMentorshipCustomer Relationship Management

Tools & Technologies

Burp Suite ProfessionalNmapNessus/TenableMetasploitFridaObjectionMobSFAzureAWSGCP

Certifications & Qualifications

OSCPGWAPTPNPTGPENOSEPOSWEPenTest+EJPTECPPT

Industry Keywords

NISTOWASPPTESMITRE ATT&CKCybersecurityOffensive SecurityRisk PrioritizationRemediation StrategiesAdversary EmulationDigital Forensics

Tech Stack

Tools & technologies

AndroidAWSAzureCloudCyber SecurityGoogle Cloud PlatformGraphQLiOSJavaJavaScriptPythonSOAPGo

About the role

Key responsibilities & impact

Independently perform penetration testing engagements against web applications, networks, APIs, mobile applications, wireless environments, and cloud-hosted systems using black-box and white-box methodologies
Conduct testing aligned with NIST, OWASP, PTES, and industry-recognized security assessment frameworks
Develop attack paths, validate vulnerabilities, and demonstrate exploitability while maintaining engagement objectives and timelines
Manage assigned engagements from planning and scoping through execution, reporting, and customer debriefs
Coordinate with senior team members, project managers, and clients to ensure successful assessment delivery
Provide technical guidance and mentorship to junior team members when appropriate
Produce comprehensive technical reports communicating vulnerabilities, business impact, attack scenarios, and remediation recommendations
Present findings to technical teams, management, and executive stakeholders
Assist customers with risk prioritization and remediation strategies
Conduct web application assessments using OWASP WSTG and OWASP Top 10 methodologies
Perform API security assessments involving REST, GraphQL, SOAP, and modern authentication mechanisms
Conduct mobile application security testing on iOS and Android
Participate in source code reviews and secure code assessments
Utilize commercial, government, open-source, and custom security tools
Develop and maintain scripts, utilities, and testing methodologies
Evaluate emerging attack techniques, vulnerabilities, and security technologies
Communicate technical findings in technical and business-focused terms
Present assessment outcomes and remediation guidance during customer briefings and readouts
Build and maintain positive customer relationships
Remain current on evolving threats, offensive security techniques, vulnerabilities, and best practices
Contribute to research, methodology enhancements, tool development, and knowledge-sharing activities
Support cybersecurity capability growth aligned to the NICE Cybersecurity Workforce Framework

Requirements

What you’ll need

Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related field; equivalency through relevant experience will be considered
Ability to successfully pass a CJIS Criminal Justice background investigation and maintain CJIS eligibility throughout employment
One or more industry-recognized penetration testing certifications preferred, such as OSCP, GWAPT, PNPT, GPEN, OSEP, OSWE, PenTest+, and eJPT/eCPPT
5+ years of hands-on cybersecurity experience, including 2+ years conducting penetration testing or offensive security assessments
Strong knowledge of web application security testing methodologies, including OWASP WSTG and OWASP Top 10
Experience conducting authenticated and unauthenticated network penetration tests
Proficiency with Burp Suite Professional, Nmap, Nessus/Tenable, Metasploit, and similar platforms
Experience identifying, exploiting, validating, and documenting security vulnerabilities
Working knowledge of network protocols, operating systems, Active Directory, authentication mechanisms, and common enterprise architectures
Experience creating professional technical reports and presenting findings to technical and non-technical audiences
Knowledge of MITRE ATT&CK, NIST, and PTES
Strong analytical, troubleshooting, and problem-solving skills
Preferred: mobile application security assessments using Frida, Objection, MobSF, and ADB
Preferred: API, cloud environment (Azure, AWS, GCP), and containerized application assessments
Preferred: source code review in Java, C#, Python, JavaScript, or Go
Preferred: red team operations, adversary emulation, attack path analysis, scripting or automation, cloud security architectures, digital forensics, malware analysis, reverse engineering, mentoring, security research, bug bounty programs, Capture-the-Flag competitions, or public vulnerability disclosures