Penetration Tester

Stack

Responsibilities

• ▹Test web applications, hack networks, and reverse software
• ▹Work on short-term engagements and extended program work with well-established clients
• ▹Solve challenging technical problems and build creative solutions
• ▹Act as a trusted advisor, providing expert opinion on difficult client business decisions

Requirements

• ▹4+ years of experience planning, conducting, and managing web application penetration tests
• ▹5+ years of application security experience
• ▹Deep understanding of security fundamentals (OWASP), common vulnerabilities, and application security best practices
• ▹Skilled in vulnerability assessment and exploit development for diverse targets
• ▹Experience with programming and scripting languages such as Python, Ruby, PowerShell, Java, JavaScript
• ▹Proficiency with operating systems: Linux, Windows, macOS
• ▹Experience with network and system exploitation, including modern TTPs (C2 frameworks, EDR bypass, privilege escalation, password cracking, lateral movement)
• ▹Strong technical reporting and documentation skills
• ▹Ability to communicate technical findings clearly to technical and executive stakeholders, with actionable remediation guidance
• ▹Work possible from anywhere in the United States; background check required

Nice to have

• ▹Experience reviewing Golang source code for vulnerabilities
• ▹Advanced relevant academic training, such as a degree in Computer Science or an OSCP
• ▹Experience with AWS cloud environments (IAM, EC2, VPC, EBS, S3, CloudWatch, Lambda) and how to keep them secure
• ▹Secondary expertise in cloud security assessments, mobile application security testing, hybrid application assessments, or AI/LLM security assessments
• ▹Background in system and network security, authentication and security protocols, and applied cryptography

Soft skills

What we offer

• ▹Remote work from anywhere in the United States
• ▹Comprehensive benefits program at an affordable price
• ▹Inclusive culture

About the company

Bishop Fox is a leader in continuous offensive security and penetration testing. It is trusted by over a quarter of the Fortune 100 and half of the Fortune 10, and its Cosmos platform was honored as Best Emerging Technology by SC Media.