Penetration Tester (Texas/Florida)

Packetlabs Ltd. • Remote (Florida), TX

14d • $80,000 - $120,000 • Remote

About The Position

Packetlabs is seeking an experienced developer and application security tester located in Texas or Florida. The role focuses on penetration testing web applications, mobile applications, thick clients, and APIs, including source code review and whitebox testing to demonstrate the impact of application flaws. It also involves reverse engineering mobile and thick-client applications, performing SAST and DAST, validating scanner results, and producing detailed reports with remediation guidance. The tester may sometimes chain application flaws into cloud or on-premises Active Directory environments; opportunities for lateral movement into infrastructure teams are limited and are granted at the manager’s discretion. The role includes learning to debrief findings for technical and executive audiences.

The organization seeks someone with strong application-security and penetration-testing skills who communicates effectively, takes pride in thorough work, adapts to changing environments, continues learning, and is self-motivated, dependable, and humble. The position is fully remote within Texas or Florida and is at-will; the posting does not constitute an employment contract or guarantee continued employment.

Requirements

• Solid working knowledge of programming languages including C, C#, Python, Objective-C, Java, JavaScript, and SQL, and frameworks such as AngularJS.
• Familiarity with web services and data exchange formats including XML, JSON, SOAP, REST, and AJAX.
• Understanding of AI/LLM weaknesses and application flaws.
• Extensive experience or expertise using an attack proxy such as Burp Suite.
• At least two years of experience dealing with information-security-related tasks.
• OSCP or Burp is mandatory for the organization.
• Strong understanding of OWASP in web, API, mobile, and AI/LLM security, with the ability to go beyond it.
• Must be located in Florida or Texas.
• Customer-first mentality and strong communication with clients, project managers, and teammates, including responding rapidly and being on time.
• Takes pride in work, investigates findings deeply until their impact is proven, and adapts to rapidly changing consulting environments.
• Committed to continuous learning and improving cybersecurity skills; self-motivated, dependable, and humble.

Nice To Haves

• Three to five years of experience working in penetration testing and consulting.
• Graduated from a post-secondary college or university degree program.
• Professional qualifications such as OSCP, OSWE, or BSCP (OSCP or Burp is mandatory).

Responsibilities

• Perform penetration testing of web applications, mobile applications, thick clients, and APIs.
• Conduct source code reviews and whitebox penetration testing to prove the impact of application flaws.
• Reverse engineer mobile and thick-client applications.
• When appropriate, chain application flaws into cloud or on-premises Active Directory environments; opportunities for lateral movement into infrastructure teams are limited and subject to manager discretion.
• Develop detailed reports describing findings and remediation for impactful findings.
• Debrief findings at technical and executive levels.
• Perform SAST and DAST on enterprise, SaaS, and custom in-house applications.
• Use scanners and validate results, including eliminating false positives.

Benefits

• Paid education and professional development reimbursement for continued learning, certifications, and technical growth.
• Flexible work environment.
• One paid volunteer day each year.
• Paid birthday day off.
• Paid U.S. public holidays.
• Fully remote work within Texas or Florida.
• Competitive compensation and growth opportunity.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed