ZipRecruiter

Log In

1

Application Penetration Tester Jobs (NOW HIRING)

Revolutional, LLC

Lead Penetration Tester

Washington, DC · On-site

$110 - $150K/hr

Lead Penetration Tester Location: Washington, DC, Ft. Collins, CO, or Kansas City, MO (project ... Web application security assessments (approximately 3-4 applications per year) * Test plan and ...

kgs

Penetration Testing Lead

Warrenton, VA

GIAC Web Application Penetration Tester (GWAPT) * GIAC Exploit Researcher and Advanced Penetration Tester (GXPN) * GIAC Assessing and Auditing Wireless Networks (GAWN) Blue Teaming Certifications:

Revolutional, LLC

Lead Penetration Tester

Kansas City, MO · On-site

$110 - $150K/hr

Lead Penetration Tester Location: Washington, DC, Ft. Collins, CO, or Kansas City, MO (project ... Web application security assessments (approximately 3-4 applications per year) * Test plan and ...

Quzara LLC

Senior Penetration Tester

Washington, DC · On-site

$145K - $180K/yr

Assess and test the security of internal networks and underlying application infrastructure. * Conduct penetration testing and vulnerability assessments on Azure cloud infrastructure and applications

kgs

Penetration Testers - Senior (Lead)

Washington, DC · On-site

GIAC Web Application Penetration Tester (GWAPT) * GIAC Exploit Researcher and Advanced Penetration Tester (GXPN) * Certified Penetration Testing Engineer (CPTE) * Certified Red Team Professional ...

Cymertek

Penetration Tester

Reston, VA · On-site

Knowledge of mobile application penetration testing * Experience with cloud security assessments (e.g., AWS, Azure) * Expertise in reverse engineering and malware analysis * Understanding of advanced ...

Cymertek

Penetration Tester

Chantilly, VA · On-site

Knowledge of mobile application penetration testing * Experience with cloud security assessments (e.g., AWS, Azure) * Expertise in reverse engineering and malware analysis * Understanding of advanced ...

Cymertek

Penetration Tester

Tysons, VA · On-site

Knowledge of mobile application penetration testing * Experience with cloud security assessments (e.g., AWS, Azure) * Expertise in reverse engineering and malware analysis * Understanding of advanced ...

M9 Solutions

Penetration Tester II

Chandler, AZ · On-site

$60K - $180K/yr

Experience with Mobile Device Application penetration testing. * Experience with Federal and Commercial Cloud technology penetration testing. * Experience conducting High Value Asset Assessments.

Cymertek

Penetration Tester

San Antonio, TX · On-site

Knowledge of mobile application penetration testing * Experience with cloud security assessments (e.g., AWS, Azure) * Expertise in reverse engineering and malware analysis * Understanding of advanced ...

Cymertek

Penetration Tester

Honolulu, HI · On-site

Knowledge of mobile application penetration testing * Experience with cloud security assessments (e.g., AWS, Azure) * Expertise in reverse engineering and malware analysis * Understanding of advanced ...

Cymertek

Penetration Tester

Aurora, CO · On-site

Knowledge of mobile application penetration testing * Experience with cloud security assessments (e.g., AWS, Azure) * Expertise in reverse engineering and malware analysis * Understanding of advanced ...

previous page

Showing results 41-60

All JobsApplication Penetration Tester Jobs

Application Penetration Tester information

See salary details

$96.5K

$132.3K

$159.5K

How much do application penetration tester jobs pay per year?

As of Aug 9, 2026, the average yearly pay for application penetration tester in the United States is $132,307.00, according to ZipRecruiter salary data. Most workers in this role earn between $121,500.00 and $146,500.00 per year, depending on experience, location, and employer.

What does an application penetration tester do?

A typical day for an Application Penetration Tester involves planning and executing tests on web and mobile applications to identify security vulnerabilities, documenting findings, and collaborating with development or security teams to discuss remediation strategies. You might spend time replicating attack scenarios, reviewing code, and researching emerging threats or new testing methodologies. Regular team meetings and client briefings are common, especially when working on larger projects or audits. The work is highly dynamic, often requiring you to juggle multiple projects and stay current with evolving security best practices.

What are the key skills and qualifications needed to thrive as an application penetration tester?

To thrive as an Application Penetration Tester, you need strong knowledge of application security, vulnerability assessment, and web technologies, typically supported by a degree in computer science, cybersecurity, or a related field. Familiarity with common penetration testing tools such as Burp Suite, OWASP ZAP, Kali Linux, as well as certifications like OSCP or CEH, is highly beneficial. Critical thinking, keen attention to detail, and clear written and verbal communication are essential soft skills for effective reporting and collaboration. These competencies ensure thorough security assessments, actionable findings, and effective teamwork to protect digital assets.

What is an application penetration tester?

An Application Penetration Tester is a cybersecurity professional who assesses the security of applications by simulating real-world attacks. They identify vulnerabilities, exploit weaknesses, and provide recommendations to improve security. Their work involves using automated tools and manual testing techniques to uncover risks. They collaborate with developers and security teams to ensure applications are protected against threats. This role requires knowledge of coding, common exploits, and security frameworks.

More about Application Penetration Tester jobs
What cities are hiring for Application Penetration Tester jobs? Cities with the most Application Penetration Tester job openings:
What are the most commonly searched types of Application Penetration Tester jobs? The most popular types of Application Penetration Tester jobs are:
What states have the most Application Penetration Tester jobs? States with the most job openings for Application Penetration Tester jobs include:
What job categories do people searching Application Penetration Tester jobs look for? The top searched job categories for Application Penetration Tester jobs are:
What are popular job titles related to Application Penetration Tester jobs? For Application Penetration Tester jobs, the most frequently searched job titles are:
Application Penetration Tester jobs near you
Infographic showing various Application Penetration Tester job openings in the United States as of August 2026, with employment types broken down into 77% Full Time, 17% Part Time, and 6% Contract. Highlights an 92% Physical, 2% Hybrid, and 6% Remote job distribution, with an average salary of $132,307 per year, or $63.6 per hour.

External Network Penetration Tester

Xtreme Solutions, Inc

San Bernardino, CA • On-site

Contractor

Posted 10 days ago

Job description

Job Type
Contract
Description
Position Summary
Performs blind and intelligent penetration testing against internet-facing assets - web applications, firewalls, remote access (VPN/RDP), and internet postings - for all 47 County departments, attempting to obtain confidential/sensitive data using real-world threat intelligence-based techniques while evading detection.
Key Responsibilities
• Conduct external network and web application penetration testing and vulnerability assessments per NIST SP 800-115 methodology.
• Attempt to obtain ePHI, PII, financial data, and privileged communications from external sources without causing service disruption.
• Document all findings with risk ratings, evidence, and remediation recommendations for the Assessment report.
• Attempt to avoid detection and evade department response efforts during testing windows, as scoped.
Requirements
Required Qualifications
• 4+ years of hands-on external network / web application penetration testing experience.
• Proficiency with industry-standard tools (Burp Suite, Nmap, Metasploit, or equivalent).
• Strong understanding of OWASP Top 10 and common network attack vectors.
Preferred Qualifications
• OSCP, GPEN, GWAPT, or CEH certification.
• Experience testing government or healthcare-sector environments.
Travel
Fully remote; must remain within the continental United States.

Apply