ZipRecruiter

Log In

2

Entry Level Application Penetration Tester Jobs (NOW HIRING)

M9 Solutions

Penetration Tester II

Washington, DC · On-site

$60K - $180K/yr

Experience with Mobile Device Application penetration testing. * Experience with Federal and Commercial Cloud technology penetration testing. * Experience conducting High Value Asset Assessments.

Compu-Vision Consulting

Penetration Tester

Atlanta, GA · On-site

Junior Penetration Tester Role Purpose The Junior Penetration Tester is an execution-focused role ... Web application and API testing * Entry-level cloud security testing (AWS, Azure, GCP) * Perform ...

Compu-Vision Consulting

Penetration Tester

Junior Penetration Tester Location: Remote Duration: 6-12 months Job Summary: Role Purpose * The ... Web application and API testing * Entry-level cloud security testing (AWS, Azure, GCP) * Perform ...

next page

Showing results 1-20

All JobsEntry Level Application Penetration Tester Jobs

Entry Level Application Penetration Tester information

See salary details

$96.5K

$132.3K

$159.5K

How much do entry level application penetration tester jobs pay per year?

As of Jul 6, 2026, the average yearly pay for entry level application penetration tester in the United States is $132,307.00, according to ZipRecruiter salary data. Most workers in this role earn between $121,500.00 and $146,500.00 per year, depending on experience, location, and employer.

What is the difference between Entry Level Application Penetration Tester vs Security Analyst?

AspectEntry Level Application Penetration TesterSecurity Analyst
CertificationsCompTIA Security+, CEH (Certified Ethical Hacker)CompTIA Security+, CISSP (entry-level roles)
Work EnvironmentHands-on testing, simulated attacks, vulnerability assessmentsMonitoring security systems, analyzing threats, incident response
Employer & Industry UsageCybersecurity firms, tech companies, government agenciesFinancial institutions, healthcare, corporate security teams

Entry Level Application Penetration Testers focus on identifying vulnerabilities in applications through simulated attacks, requiring technical skills and certifications like CEH. Security Analysts monitor and analyze security systems to detect threats, often with similar certifications but a broader focus on security operations. Both roles are essential in cybersecurity but differ in daily tasks and focus areas.

More about Entry Level Application Penetration Tester jobs
What cities are hiring for Entry Level Application Penetration Tester jobs? Cities with the most Entry Level Application Penetration Tester job openings:
What are the most commonly searched types of Application Penetration Tester jobs? The most popular types of Application Penetration Tester jobs are:
What states have the most Entry Level Application Penetration Tester jobs? States with the most job openings for Entry Level Application Penetration Tester jobs include:
What job categories do people searching Entry Level Application Penetration Tester jobs look for? The top searched job categories for Entry Level Application Penetration Tester jobs are:
Entry Level Application Penetration Tester jobs near you
Infographic showing various Entry Level Application Penetration Tester job openings in the United States as of June 2026, with employment types broken down into 100% Full Time. Highlights an 83% Physical, 3% Hybrid, and 14% Remote job distribution, with an average salary of $132,307 per year, or $63.6 per hour.
Application Penetration Tester

Application Penetration Tester

Strategic Staffing Solutions

Charlotte, NC • On-site

Other

Posted 25 days ago

Job description

Job Title: Application Penetration Tester

Locations: Charlotte, NC - Dallas,TX - Minneapolis, MN - Chandler, AZ - Des Moines, IA - Columbus, OH - Raleigh, NC - San Antonio, TX and Washington DC (Hybrid)

Duration: 12 Months

Job/Role Description:


  • This role focuses on identifying, validating, and exploiting security vulnerabilities through hands-on, manual penetration testing across a broad range of application technologies.
  • This position will conduct application penetration testing on browser-based/web applications, APIs, and mobile applications (mainframe and thick client experience a plus) using primarily manual techniques supplemented by automated tools, including authentication/authorization testing and business-logic abuse cases.
  • Perform deep defect analysis by reproducing, validating, and safely demonstrating security impact, including chained attack paths where applicable, while triaging and dispositioning false positives from automated tooling.
  • Configure and tune automated application security testing tools to improve coverage, accelerate discovery, and complement manual testing efforts.
  • Produce clear, reproducible technical reports with detailed evidence including steps to reproduce, impacted components/endpoints, risk/impact assessment, and practical remediation guidance.
  • Collaborate with application development and security teams to ensure shared understanding of defects, support prioritization, and drive timely remediation through defect walkthroughs and follow-up activities.
  • Support continuous improvement of penetration testing methodologies and processes by leveraging industry standards and best practices.
  • Collaborate with team members to share knowledge, complete peer reviews of reports, and strengthen overall testing capabilities.
  • Communicate findings and risks clearly to technical and non-technical stakeholders, supporting readouts, status updates, and remediation Q&A sessions.

Required Qualifications


  • 2+ years of hands-on application penetration testing experience with a strong emphasis on manual testing, beyond reviewing or validating automated scanner results
  • 2+ years of Dynamic Application Security Testing (DAST) experience, including tool configuration/tuning and manual verification of findings
  • 2+ years of Cybersecurity experience, or equivalent demonstrated through one or a combination of work experience, training, military experience, or education
  • Experience conducting penetration testing on browser-based/web applications and APIs required; experience with mobile, mainframe, or thick client applications a plus
  • Proficiency with application security testing tools such as Burp Suite, Invicti, WebInspect, and Fiddler a plus
  • Strong knowledge of common application security vulnerabilities and the OWASP Top 10
  • Experience with scripting and automation (e.g., Python, Shell) a plus
  • Knowledge of security best practices and compliance standards such as PCI DSS and GDPR preferred
  • Demonstrated understanding of security risks in AI/ML-enabled applications (e.g., prompt injection, sensitive data exposure, insecure integrations) a plus
  • Security certifications such as OSCP, BSCP, GWAPT, GPEN, GXPN or equivalent a plus
  • Excellent written and verbal communication skills with the ability to convey technical findings clearly to diverse audiences
  • Strong problem-solving and analytical skills
  • Proven ability to work effectively in a team-oriented, collaborative environment and partner with cross-functional teams
  • Ability to prioritize tasks and deliver high-quality results in a dynamic, fast-paced environment
  • Highly self-motivated and directed with strong organizational skills and keen attention to detail
  • Strong customer service orientation focused on delivering actionable insights and supporting timely remediation
  • This position offers a hybrid work schedule with consistent Monday Friday hours (flexible as long as schedule remains consistent)

Apply