ZipRecruiter

Log In

1

Cyber Security Penetration Testing Jobs (NOW HIRING)

Endyna

Penetration Testing - SME

Mclean, VA · On-site

The SME will lead complex penetration testing engagements, provide technical consulting to Federal auditors, develop testing methodologies, mentor penetration testers, deliver cybersecurity training ...

Feditc LLC

Penetration Testing - SME

Mclean, VA · On-site

The SME will lead complex penetration testing engagements, provide technical consulting to Federal auditors, develop testing methodologies, mentor penetration testers, deliver cybersecurity training ...

kgs

Penetration Testing Lead

Warrenton, VA

This role requires a highly technical leader with demonstrated experience in offensive and defensive cybersecurity operations and penetration testing methodologies. Essential Functions ...

Endyna

Penetration Testing - SME

Mclean, VA · Remote

The SME will lead complex penetration testing engagements, provide technical consulting to Federal auditors, develop testing methodologies, mentor penetration testers, deliver cybersecurity training ...

Koniag

Penetration Testing Lead

Atlantic City, NJ · On-site

This role requires a highly technical leader with demonstrated experience in offensive and defensive cybersecurity operations and penetration testing methodologies. Essential Functions ...

Koniag

Penetration Testing Lead

Oklahoma City, OK · On-site

This role requires a highly technical leader with demonstrated experience in offensive and defensive cybersecurity operations and penetration testing methodologies. Essential Functions ...

Koniag

Penetration Testing Lead

Leesburg, VA · On-site

This role requires a highly technical leader with demonstrated experience in offensive and defensive cybersecurity operations and penetration testing methodologies. Essential Functions ...

Koniag

Penetration Testing Lead

Washington, DC · On-site

This role requires a highly technical leader with demonstrated experience in offensive and defensive cybersecurity operations and penetration testing methodologies. Essential Functions ...

TekSynap

Penetration Tester

Clackamas, OR · On-site

Apply offensive cybersecurity testing techniques, including manual and automated testing methods. Coordinate penetration testing activities and schedules with internal stakeholders, system owners ...

TekSynap

Penetration Tester

Paradise Valley, AZ · On-site

Apply offensive cybersecurity testing techniques, including manual and automated testing methods. Coordinate penetration testing activities and schedules with internal stakeholders, system owners ...

next page

Showing results 1-20

All JobsCyber Security Penetration Testing Jobs

Cyber Security Penetration Testing information

See salary details

$40.5K

$122.9K

$180K

How much do cyber security penetration testing jobs pay per year?

As of Jul 7, 2026, the average yearly pay for cyber security penetration testing in the United States is $122,890.00, according to ZipRecruiter salary data. Most workers in this role earn between $102,000.00 and $142,000.00 per year, depending on experience, location, and employer.

Can you make $500,000 a year in cyber security?

Cyber security penetration testers can potentially earn $500,000 annually with extensive experience, advanced certifications, and specialized skills in high-demand areas or senior roles. Such salaries are typically achieved in senior positions, consulting, or leadership roles within large organizations or through independent contracting. Entry-level or mid-tier roles usually offer lower compensation, often below this threshold.

How much do cyber security penetration testers make?

Cyber security penetration testers typically earn between $70,000 and $130,000 annually, depending on experience, certifications, and location. Senior testers with advanced skills and certifications like OSCP or CISSP can earn higher salaries, especially in high-demand markets.

What are the key skills and qualifications needed to thrive as a Cyber Security Penetration Tester, and why are they important?

To thrive as a Cyber Security Penetration Tester, you need a strong understanding of network protocols, operating systems, application vulnerabilities, and security frameworks, often supported by a degree in computer science or related field. Familiarity with tools like Metasploit, Burp Suite, and Nmap, as well as certifications such as OSCP or CEH, is typically expected. Analytical thinking, attention to detail, and effective communication set top performers apart in this role. These skills and qualifications are crucial to accurately identify security weaknesses and convey actionable insights that protect organizational assets.

What is the difference between Cyber Security Penetration Testing vs Cyber Security Analyst?

AspectCyber Security Penetration TestingCyber Security Analyst
Primary FocusSimulating attacks to identify vulnerabilitiesMonitoring, analyzing, and defending against threats
CertificationsOSCP, CEH, GPENCISSP, Security+, CEH
Work EnvironmentEngaged in offensive security tasks, often in labs or client sitesSecurity operations centers, corporate environments
ResponsibilitiesConducting penetration tests, reporting vulnerabilitiesMonitoring security alerts, incident response

While both roles require cybersecurity certifications and involve understanding security threats, penetration testers focus on proactively finding vulnerabilities through simulated attacks. Analysts primarily monitor and respond to security incidents to protect organizational assets.

Will pentesters be replaced by AI?

Cyber security penetration testers perform manual testing to identify vulnerabilities that AI tools alone cannot fully replicate. While AI can assist in automating certain tasks and analyzing large data sets, human expertise is essential for creative thinking, contextual understanding, and adapting to new threats. Therefore, pentesters will continue to play a vital role alongside AI advancements in cybersecurity.

What is cyber security penetration testing?

Cyber security penetration testing, also known as pen testing, is a simulated cyberattack on a computer system, network, or web application to identify and exploit security vulnerabilities before malicious hackers can do so. The goal is to evaluate the security of the system by safely attempting to exploit weaknesses, such as flaws in software, hardware, or human processes. Penetration testers use a variety of tools and techniques to mimic real-world attacks and provide organizations with insights and recommendations to improve their security posture.

What are some common challenges faced by cyber security penetration testers when working on client engagements?

Penetration testers often encounter challenges such as limited information (black-box testing), strict time constraints, and navigating complex, ever-changing IT environments. They must balance thoroughness with efficiency, ensuring they identify critical vulnerabilities without disrupting business operations. Effective communication with clients and internal teams is essential, as testers need to clearly explain findings and remediation steps to both technical and non-technical stakeholders. Staying updated on the latest threats and attack techniques is also crucial for success in this dynamic field.

Is penetration testing a good career?

Penetration testing is a valuable cybersecurity role that involves identifying vulnerabilities in systems and networks. It offers high demand, competitive salaries, and opportunities for certification such as OSCP or CEH, making it a strong career choice for those interested in cybersecurity and ethical hacking.
More about Cyber Security Penetration Testing jobs
What cities are hiring for Cyber Security Penetration Testing jobs? Cities with the most Cyber Security Penetration Testing job openings:
What states have the most Cyber Security Penetration Testing jobs? States with the most job openings for Cyber Security Penetration Testing jobs include:
What job categories do people searching Cyber Security Penetration Testing jobs look for? The top searched job categories for Cyber Security Penetration Testing jobs are:
Cyber Security Penetration Testing jobs near you
Infographic showing various Cyber Security Penetration Testing job openings in the United States as of July 2026, with employment types broken down into 67% Full Time, and 33% Part Time. Highlights an 100% In-person job distribution, with an average salary of $122,890 per year, or $59.1 per hour.
Cyber Security Project Engineer

Cyber Security Project Engineer

Bespoke Technologies, Inc

Herndon, VA • On-site

Full-time

Posted 5 days ago

Job description

BT-342 - Cyber Security Project Engineer
Herndon, VA (fully on-site, no remote option)
**Please do NOT apply if you do not have an active Poly clearance. Those without a Poly will not be considered.**
Bespoke Technologies is searching for a Cyber Security Project Engineer.
The client provides a highly technical and in-depth penetration testing service, in support of enterprise cyber security equities. The client requires support specializing in penetration testing and ethical hacking, to target, assess, and exploit risk and vulnerabilities of information systems. The intent is to provide senior decision makers with documented and actionable data to aid in making strategic investment decisions.
Required:
  • Demonstrated work experience in cyber security or related IT field
  • Experience with cyber security penetration testing
  • Experience leveraging adversarial tactics to conduct hands-on security testing
  • Experience applying computer attack methods and system exploitation techniques
  • Working knowledge of cyber security principles for Linux, Windows, and virtual platforms
  • Experience designing, testing, or implementing IT security architecture
  • Experience performing network security analysis
  • Experience analyzing network architectures
  • Experience using network management tools
  • Experience developing risk management methodologies
  • Experience analyzing test results to develop risk and threat mitigation plans
  • Experience testing or reviewing system configuration, development, and design, specifically around enterprise systems and hypervisors
  • Experience designing, testing, or implementing complex Windows installations
  • Certifications: Certified Ethical Hacker (CEH), Offensive Security Certified Professional (OSCP), Global Information Assurance Certified Penetration Testing (GPEN)

Apply