Agile Defense

4 weeks ago

Senior Penetration Tester

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 22 hours agoStatus: Live

Job Summary

Senior penetration tester for an agency-level cybersecurity program performing web application and API penetration testing, threat analysis, and remediation support. Remote work with onsite alignment in Alexandria, VA as directed; strong report writing, communication, and hands-on testing across Windows/Linux environments.

Location: United States

Workplace: Remote

Employment Type: Full time

Job Function: Cybersecurity

Key Responsibilities

•Conduct web application and API database penetration testing efforts.
•Analyze application workflows, API endpoints, authentication mechanisms, and authorization controls to identify weaknesses.
•Coordinate with system owners, developers, and security personnel to communicate findings and support remediation.
•Draft and review analysis reports resulting from penetration testing; stay current with emerging threats and mitigation strategies.
•Develop automated testing programs where possible and efficient.

Pay and Benefits

Salary: USD 115,000 - 150,000 annually

Key Requirements

•4-5 years of experience in penetration testing, vulnerability management, and related cyber security operations.
•Minimum 3 years experience with assessing APT threats, penetration testing, vulnerability management, attack methodologies, malware analysis, and threat emulation.
•Familiarity with API testing methodologies (REST, SOAP, JSON, XML) and authentication/token-based workflows.
•Understanding of OWASP Top 10, API Security Top 10, and common web application attack vectors; ability to write and present technical security assessment reports.
•Experience with Kali Linux, Metasploit, Burp Suite, and post-exploitation frameworks; working knowledge of NIST and FISMA compliance.

Experience:4-5 yearsCybersecurityPenetration testingThreat emulationAPIsWeb application security

Education:Bachelor's

Skills:CommunicationReport writingAnalytical thinkingProblem solvingTeam collaboration

Certifications:GPENGWAPTGSNAGMONGISFGAWNGWEBGXPNCEHGNFAOSCPOSEEOSCEOSWPCISSP

Languages:English

Tech Stack:Kali LinuxMetasploitBurp SuiteRESTSOAPJSONXMLWindowsLinuxOS XActive DirectoryNISTFISMA

Eligibility

Security Clearance:Public Trust

Company Brief

Agile Defense

Provides cybersecurity services including managed detection and response, incident response, vulnerability assessments, and security operations to help organizations detect, respond to, and remediate cyber threats while meeting regulatory and compliance requirements.

Industry: Cybersecurity

Website

Loading job details...

Preparing the role view and application actions.

Agile Defense

4 weeks ago

Senior Penetration Tester

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 22 hours agoStatus: Live

Job Summary

Location: United States

Workplace: Remote

Employment Type: Full time

Job Function: Cybersecurity

Key Responsibilities

•Conduct web application and API database penetration testing efforts.
•Analyze application workflows, API endpoints, authentication mechanisms, and authorization controls to identify weaknesses.
•Coordinate with system owners, developers, and security personnel to communicate findings and support remediation.
•Draft and review analysis reports resulting from penetration testing; stay current with emerging threats and mitigation strategies.
•Develop automated testing programs where possible and efficient.

Pay and Benefits

Salary: USD 115,000 - 150,000 annually

Key Requirements

•4-5 years of experience in penetration testing, vulnerability management, and related cyber security operations.
•Minimum 3 years experience with assessing APT threats, penetration testing, vulnerability management, attack methodologies, malware analysis, and threat emulation.
•Familiarity with API testing methodologies (REST, SOAP, JSON, XML) and authentication/token-based workflows.
•Understanding of OWASP Top 10, API Security Top 10, and common web application attack vectors; ability to write and present technical security assessment reports.
•Experience with Kali Linux, Metasploit, Burp Suite, and post-exploitation frameworks; working knowledge of NIST and FISMA compliance.

Experience:4-5 yearsCybersecurityPenetration testingThreat emulationAPIsWeb application security

Education:Bachelor's

Skills:CommunicationReport writingAnalytical thinkingProblem solvingTeam collaboration

Certifications:GPENGWAPTGSNAGMONGISFGAWNGWEBGXPNCEHGNFAOSCPOSEEOSCEOSWPCISSP

Languages:English

Tech Stack:Kali LinuxMetasploitBurp SuiteRESTSOAPJSONXMLWindowsLinuxOS XActive DirectoryNISTFISMA

Eligibility

Security Clearance:Public Trust

Company Brief

Agile Defense

Industry: Cybersecurity

Website