Penetration Tester - Contract

Stack

Responsibilities

• ▹Identify vulnerabilities and validate risk
• ▹Develop creative solutions
• ▹Clearly communicate findings and remediation guidance to technical and executive stakeholders
• ▹Act as a trusted advisor helping clients understand risk and make informed security decisions
• ▹Work on projects from short-term assessments to longer-term program engagements alongside US and international teams

Requirements

• ▹5+ years of experience planning, conducting, and managing web application penetration tests
• ▹Deep understanding of application security fundamentals, OWASP Top 10, common vulnerabilities, and secure development best practices
• ▹Experience assessing vulnerabilities and developing exploits across diverse targets
• ▹Strong understanding of system and network security, authentication protocols, security protocols, and applied cryptography
• ▹Ability to communicate complex technical findings clearly and provide practical remediation guidance to technical and executive audiences
• ▹Must be located in the United States and legally authorized to work without visa sponsorship; background check required

Nice to have

• ▹Deep experience in at least one area: cloud security (AWS: IAM, EC2, VPC, EBS, S3, CloudWatch, Lambda)
• ▹Mobile application security (iOS and/or Android)
• ▹Source-assisted application assessments (source code, APIs, infrastructure, integrations); Golang highly preferred, plus Python, Ruby, PowerShell, Java, JavaScript
• ▹Network and system exploitation: C2 frameworks, EDR bypass, privilege escalation, password cracking, lateral movement
• ▹AI/LLM security: assessing non-deterministic security controls

Soft skills

What we offer

• ▹Independent contractor (1099) engagement
• ▹Work from within the United States

About the company

Bishop Fox is a leader in continuous offensive security and penetration testing. It is trusted by over a quarter of the Fortune 100 and half of the Fortune 10, and its Cosmos platform was honored as Best Emerging Technology by SC Media.