Penetration Tester

A-LIGN External

2d•Remote

About The Position

The Penetration Tester executes offensive security activities for Pathfynder by A-LIGN and delivers external network, web application, and API penetration testing engagements. The role independently identifies and validates real-world security risks, manually exploits vulnerabilities, documents findings, and communicates practical remediation guidance to clients. It also calls for technical, client-focused testing strategies that support the company’s growth.

Requirements

Degree in cybersecurity, computer science, or a related discipline, or equivalent professional experience.
At least 5 years of hands-on offensive security experience, including at least 3 years focused on external network, web application, or API penetration testing.
Experience performing web application penetration testing using black-box, grey-box, and white-box approaches.
Experience testing APIs, including REST, GraphQL, SOAP, or gRPC.
Ability to manage engagements from scoping and execution through reporting and client debriefs.
Working knowledge of OWASP WSTG, OWASP ASVS, OWASP API Security Top 10, and PTES.
At least one required certification: OSCP/OSCP+, OSWA, eWPT, HTB CWES, TCM PWPP, GWAPT, GPEN, or CREST CRT. Published CVEs, conference presentations, or meaningful contributions to open-source security tooling may be considered in place of certifications.
Advanced manual testing skills, including chaining lower-severity findings into high-impact attack paths.
Advanced web exploitation knowledge, including access control and authorization flaws, OAuth, SAML and JWT abuse, SSRF, deserialization, request smuggling, race conditions, and business logic abuse.
Knowledge of external attack surfaces, including OSINT, asset discovery, edge-device exploitation, and SSO or MFA attack techniques.
Proficiency with scripting languages such as Python, Bash, JavaScript, PowerShell, or Go, including the ability to build custom tooling and exploits.
Proficiency with offensive security and assessment tools such as Burp Suite, Caido, Nmap, Nuclei, SQLmap, ffuf, Postman, and Nessus.
Familiarity with application frameworks including Laravel, Express.js, ASP.NET Core, Spring, and Django.
Ability to write clear, concise, client-ready reports with accurate risk ratings and actionable remediation guidance.
Excellent verbal and written communication skills, including the ability to explain technical risks to technical and non-technical audiences.
Ability to work independently and collaboratively in a fast-paced, remote environment while meeting deadlines.

Nice To Haves

Consulting or client-facing security delivery experience.
Mobile application penetration testing experience across iOS or Android.
White-box or source-code-assisted testing experience.
Preferred certifications: OSWE, HTB CWEE, BSCP, eWPTX, CREST CCT APP, TCM PWPE, OSEP, or GXPN.
Experience assessing AI- or LLM-integrated applications for prompt injection, jailbreaks, data leakage, and agent or tool abuse.
Familiarity with the OWASP Top 10 for LLM Applications and cloud attack surfaces across AWS, Azure, or GCP.

Responsibilities

Execute external network, web application, and API penetration testing engagements.
Identify, validate, and manually exploit vulnerabilities using public exploits, custom-developed exploits, or a combination of techniques.
Evaluate findings in context, develop realistic attack paths, and accurately assess business and technical risk.
Deliver clear, accurate, client-ready reports explaining findings, risk ratings, evidence, and actionable remediation guidance.
Communicate technical issues, testing results, and remediation recommendations to client stakeholders.
Maintain project quality and timelines while executing assigned engagements with minimal oversight.
Collaborate with the offensive security team to evaluate tools, improve delivery methods, and share technical knowledge.
Mentor junior testers and contribute to team capabilities and repeatable testing practices.