ZipRecruiter

Log In

1

Associate Application Penetration Tester Jobs (NOW HIRING)

Total Cyber Solutions LLC

Penetration Tester

Springfield, VA · On-site

$100K - $140K/yr

CISSP (or Associate) * GCED * GICSP * GCIH Additional Certifications (Preferred): * Red Team ... GIAC Web Application Penetration Tester (GWAP) Company Description Total Cyber Solutions is a ...

Apply Early

cFocus Software

NIH - Penetration Tester

Experience with network and application security assessments. * Experience documenting technical ... Conduct enterprise penetration testing activities including: * Perform internal and external ...

next page

Showing results 1-20

All JobsAssociate Application Penetration Tester Jobs

Associate Application Penetration Tester information

See salary details

$96.5K

$132.3K

$159.5K

How much do associate application penetration tester jobs pay per year?

As of Jul 6, 2026, the average yearly pay for associate application penetration tester in the United States is $132,307.00, according to ZipRecruiter salary data. Most workers in this role earn between $121,500.00 and $146,500.00 per year, depending on experience, location, and employer.

What is the difference between Associate Application Penetration Tester vs Application Security Analyst?

AspectAssociate Application Penetration TesterApplication Security Analyst
CertificationsOSCP, CEH, CompTIA Security+GIAC, CISSP, CSSLP
Work EnvironmentHands-on testing, vulnerability assessmentsSecurity monitoring, risk analysis
Employer & Industry UsageCybersecurity firms, tech companiesFinancial, healthcare, enterprise sectors
Common Search/ComparisonYesYes

The Associate Application Penetration Tester primarily focuses on conducting penetration tests to identify vulnerabilities in applications, often working in a hands-on environment. In contrast, an Application Security Analyst emphasizes monitoring security, analyzing risks, and implementing security measures. While both roles require cybersecurity certifications and are integral to application security, their daily tasks and focus areas differ, making them distinct but complementary positions in cybersecurity teams.

More about Associate Application Penetration Tester jobs
What cities are hiring for Associate Application Penetration Tester jobs? Cities with the most Associate Application Penetration Tester job openings:
What are the most commonly searched types of Application Penetration Tester jobs? The most popular types of Application Penetration Tester jobs are:
What states have the most Associate Application Penetration Tester jobs? States with the most job openings for Associate Application Penetration Tester jobs include:
What job categories do people searching Associate Application Penetration Tester jobs look for? The top searched job categories for Associate Application Penetration Tester jobs are:
Associate Application Penetration Tester jobs near you
Infographic showing various Associate Application Penetration Tester job openings in the United States as of June 2026, with employment types broken down into 80% Full Time, and 20% Part Time. Highlights an 83% Physical, 3% Hybrid, and 14% Remote job distribution, with an average salary of $132,307 per year, or $63.6 per hour.
Application Penetration Tester

Application Penetration Tester

Strategic Staffing Solutions

Charlotte, NC • On-site

Other

Posted 25 days ago

Job description

Job Title: Application Penetration Tester

Locations: Charlotte, NC - Dallas,TX - Minneapolis, MN - Chandler, AZ - Des Moines, IA - Columbus, OH - Raleigh, NC - San Antonio, TX and Washington DC (Hybrid)

Duration: 12 Months

Job/Role Description:


  • This role focuses on identifying, validating, and exploiting security vulnerabilities through hands-on, manual penetration testing across a broad range of application technologies.
  • This position will conduct application penetration testing on browser-based/web applications, APIs, and mobile applications (mainframe and thick client experience a plus) using primarily manual techniques supplemented by automated tools, including authentication/authorization testing and business-logic abuse cases.
  • Perform deep defect analysis by reproducing, validating, and safely demonstrating security impact, including chained attack paths where applicable, while triaging and dispositioning false positives from automated tooling.
  • Configure and tune automated application security testing tools to improve coverage, accelerate discovery, and complement manual testing efforts.
  • Produce clear, reproducible technical reports with detailed evidence including steps to reproduce, impacted components/endpoints, risk/impact assessment, and practical remediation guidance.
  • Collaborate with application development and security teams to ensure shared understanding of defects, support prioritization, and drive timely remediation through defect walkthroughs and follow-up activities.
  • Support continuous improvement of penetration testing methodologies and processes by leveraging industry standards and best practices.
  • Collaborate with team members to share knowledge, complete peer reviews of reports, and strengthen overall testing capabilities.
  • Communicate findings and risks clearly to technical and non-technical stakeholders, supporting readouts, status updates, and remediation Q&A sessions.

Required Qualifications


  • 2+ years of hands-on application penetration testing experience with a strong emphasis on manual testing, beyond reviewing or validating automated scanner results
  • 2+ years of Dynamic Application Security Testing (DAST) experience, including tool configuration/tuning and manual verification of findings
  • 2+ years of Cybersecurity experience, or equivalent demonstrated through one or a combination of work experience, training, military experience, or education
  • Experience conducting penetration testing on browser-based/web applications and APIs required; experience with mobile, mainframe, or thick client applications a plus
  • Proficiency with application security testing tools such as Burp Suite, Invicti, WebInspect, and Fiddler a plus
  • Strong knowledge of common application security vulnerabilities and the OWASP Top 10
  • Experience with scripting and automation (e.g., Python, Shell) a plus
  • Knowledge of security best practices and compliance standards such as PCI DSS and GDPR preferred
  • Demonstrated understanding of security risks in AI/ML-enabled applications (e.g., prompt injection, sensitive data exposure, insecure integrations) a plus
  • Security certifications such as OSCP, BSCP, GWAPT, GPEN, GXPN or equivalent a plus
  • Excellent written and verbal communication skills with the ability to convey technical findings clearly to diverse audiences
  • Strong problem-solving and analytical skills
  • Proven ability to work effectively in a team-oriented, collaborative environment and partner with cross-functional teams
  • Ability to prioritize tasks and deliver high-quality results in a dynamic, fast-paced environment
  • Highly self-motivated and directed with strong organizational skills and keen attention to detail
  • Strong customer service orientation focused on delivering actionable insights and supporting timely remediation
  • This position offers a hybrid work schedule with consistent Monday Friday hours (flexible as long as schedule remains consistent)

Apply