Penetration Tester Jobs

126 jobs found — updated daily

Cloud Security Penetration Tester

The Vanguard Group•Dallas, TX
•Hybrid

About The Position

The Cloud Security Penetration Tester plans, leads, and conducts penetration tests across multi-cloud environments and cloud-hosted applications. The role uses manual and automated testing to identify and validate vulnerabilities, misconfigurations, IAM weaknesses, privilege-escalation paths, insecure trust relationships, and cloud attack paths. It develops detailed assessment reports and presents findings to technical teams and leadership. The position leads reporting and works with IT sub-divisions, third-party partners, and business units to assess the effects of technology implementations on IT and business operations. It also advances cloud penetration testing methodologies, tools, automation, standards, and best practices; maintains subject matter expertise; researches emerging cloud vulnerabilities, attack techniques, and offensive security tools; and leads the evaluation and onboarding of new tools, developing custom tools when needed. The role may participate in special projects and perform other assigned duties. Vanguard is not offering visa sponsorship for this position. Vanguard describes a hybrid working model for the majority of its crew members, intended to support flexibility as well as in-person learning, collaboration, and connection.

Requirements

  • Minimum of ten years of related work experience, including at least three years in information security.
  • Undergraduate degree in a related field or an equivalent combination of training and experience.
  • Hands-on experience performing penetration testing or offensive security assessments across multiple cloud platforms.
  • Experience performing cloud, web application, and API penetration testing.
  • Ability to clearly document and communicate technical vulnerabilities, exploitation scenarios, business impact, and remediation recommendations.

Nice To Haves

  • Preferred industry security certifications, such as GIAC Cloud Penetration Tester (GCPN), OffSec Certified Professional (OSCP), GIAC Penetration Tester (GPEN), OffSec Web Assessor (OSWA), OffSec Web Expert (OSWE), or GIAC Web Application Penetration Tester (GWAPT).

Responsibilities

  • Plan, lead, and conduct penetration tests across multi-cloud environments and cloud-hosted applications.
  • Perform manual and automated testing to identify and validate vulnerabilities, misconfigurations, IAM weaknesses, privilege-escalation paths, insecure trust relationships, and cloud attack paths.
  • Develop detailed assessment reports and present findings to technical teams and leadership.
  • Lead reporting and collaborate with IT sub-divisions, third-party partners, and business units to identify the impact of technology implementations on IT and business operations.
  • Lead the evolution of cloud penetration testing methodologies, tooling, automation, standards, and best practices.
  • Maintain subject matter expertise.
  • Research emerging cloud vulnerabilities, attack techniques, and offensive security tooling.
  • Lead the evaluation and onboarding of new tooling, and develop custom tools as needed.
  • Participate in special projects and perform other duties as assigned.

Build a Resume for Penetration Tester

The resume builder that gets results.

  • Get clear feedback so you look as qualified as you are
  • Align your resume with the job to get further in the process, faster
  • Take the guesswork out of resume writing

Explore Related Job Searches

Frequently Asked Questions

Common questions about Penetration Tester careers and jobs.

Based on current job postings on Teal, the average Penetration Tester salary in the US is approximately $140,000 per year, with a typical range of $75,000 to $231,000.
© 2026 Teal Labs, Inc
Privacy PolicyTerms of Service