Penetration Tester

Velero

. Conduct penetration tests on web applications, mobile applications, and APIs to identify vulnerabilities and potential exploits .

Posted 9/25/2026contractRemote • Florida • United StatesMid-LevelSenior💰 $120 - $160 per hourWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in penetration testing across web applications, mobile applications, APIs, and network environments, with a strong understanding of security vulnerabilities and regulatory compliance. Proficient in using industry-standard tools and frameworks to identify and mitigate security risks while effectively communicating findings to diverse audiences.

Highest-signal resume keywords

Penetration TestingNetwork Security TestingOWASP Top 10 KnowledgeGDPR ComplianceOSCP Certification

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Penetration TestingAPI Security TestingMobile Security FrameworksVulnerability AssessmentScripting Languages

Soft Skills

Communication SkillsCollaboration

Tools & Technologies

Burp SuiteNmapMetasploitWiresharkNessus

Certifications & Qualifications

OSCPCEHGPEN

Industry Keywords

GDPRPCI-DSSSOC 2MITRE ATT&CKPhishing Campaigns

Tech Stack

Tools & technologies

AWSAzureCloudJavaScriptPython

About the role

Key responsibilities & impact

Conduct penetration tests on web applications, mobile applications, and APIs to identify vulnerabilities and potential exploits
Perform internal and external network penetration testing
Implement social engineering techniques, including phishing campaigns, to simulate real-world attacks and identify human-related security risks
Prepare detailed technical reports and provide actionable recommendations
Collaborate with internal teams and external clients on findings, mitigation strategies, and security best practices
Ensure compliance with GDPR, PCI-DSS, SOC 2, and other relevant security standards and regulations
Stay current on emerging threats, vulnerabilities, and security best practices

Requirements

What you’ll need

Proven experience (3+ years) in penetration testing across web apps, mobile apps, APIs, and network environments
Expertise in internal and external network penetration testing
Knowledge of common security vulnerabilities and attack vectors, including OWASP Top 10 and MITRE ATT&CK
Familiarity with Burp Suite, Nmap, Metasploit, Wireshark, Nessus, and other industry-standard tools
Experience with cloud environments such as AWS, Azure, and Google Cloud is a plus
Strong understanding of GDPR, PCI-DSS, SOC 2, and other regulatory frameworks
Excellent verbal and written communication skills, with the ability to present findings to technical and non-technical audiences
OSCP, CEH, GPEN, or similar certifications are preferred
Experience with mobile security frameworks and tools such as OWASP MSTG
Experience in API security testing, including OAuth and other common API security models
Proficiency in one or more programming/scripting languages such as Python, Bash, or JavaScript

Benefits

Comp & perks

Flexible, remote contract opportunity
Flexibility of remote work with a nearshore focus
Competitive compensation