1

Ethical Penetration Testing Jobs (NOW HIRING)

Position responsibilities can span from compliance testing to penetration testing, depending on ... Extensive job experience as an ethical penetration tester * Extensive experience using modern ...

New

Act as an ethical attacker (red team) to simulate cyber intrusions, or as defensive cybersecurity personnel (blue team) to strengthen system resilience. * Develop penetration testing Rules of ...

Act as an ethical attacker (red team) to simulate cyber intrusions, or as defensive cybersecurity personnel (blue team) to strengthen system resilience. * Develop penetration testing Rules of ...

We are seeking an experienced and results-driven Penetration Tester to perform comprehensive web ... Preferred : • CEH (Certified Ethical Hacker) - Required. • OSCP (Offensive Security Certified ...

Penetration Tester

Rensselaer, NY · On-site

$90K - $105K/yr

Experience in penetration testing or ethical hacking with a focus on Java application security. * Experience with penetration testing tools such as Burp Suite and Metasploit. * Familiarity with ...

This role combines hands-on testing with leadership, mentoring, and collaboration across ... CEH (Certified Ethical Hacker) * CISSP (Certified Information Systems Security Professional ...

Possess a certification in penetration testing, such as: * Licensed Penetration Tester (LPT) * Certified Expert Penetration Tester (CEPT) * Certified Ethical Hacker (CEH) * Global Information ...

Ethical Hacking: * * Conduct all penetration testing activities in a legal and ethical manner, adhering to established rules of engagement. * Protect the confidentiality and integrity of sensitive ...

Penetration Tester

Herndon, VA · On-site

$86.80 - $198/hr

Find possible vulnerabilities while using penetration testing tools and techniques to ensure ... Certified Ethical Hacker ( CEH ) , Offensive Security Certified Professional ( OSCP ) , HTB ...

Ethical Hacking: * * Conduct all penetration testing activities in a legal and ethical manner, adhering to established rules of engagement. * Protect the confidentiality and integrity of sensitive ...

Penetration Tester

Quantico, VA · On-site

$130K - $147K/yr

Ethical Hacking: * * Conduct all penetration testing activities in a legal and ethical manner, adhering to established rules of engagement. * Protect the confidentiality and integrity of sensitive ...

This role combines hands-on testing with leadership, mentoring, and collaboration across ... CEH (Certified Ethical Hacker) * CISSP (Certified Information Systems Security Professional ...

Penetration Tester

Rensselaer, NY · On-site

$90 - $105/hr

Experience in penetration testing or ethical hacking with a focus on Java application security. * Experience with penetration testing tools such as Burp Suite and Metasploit. * Familiarity with ...

$90 - $105/hr

Experience in penetration testing or ethical hacking with a focus on Java application security. * Experience with penetration testing tools such as Burp Suite and Metasploit. * Familiarity with ...

Possess a certification in penetration testing, such as: * Licensed Penetration Tester (LPT) * Certified Expert Penetration Tester (CEPT) * Certified Ethical Hacker (CEH) * Global Information ...

next page

Showing results 1-20

Ethical Penetration Testing information

See salary details

$22.5K

$119.9K

$168.5K

How much do ethical penetration testing jobs pay per year?

As of Aug 22, 2026, the average yearly pay for ethical penetration testing in the United States is $119,895.00, according to ZipRecruiter salary data. Most workers in this role earn between $96,000.00 and $141,000.00 per year, depending on experience, location, and employer.

What is ethical penetration testing?

Ethical penetration testing, also known as ethical hacking, is the practice of simulating cyberattacks on a computer system, network, or application with the permission of its owner. The goal is to identify security vulnerabilities before malicious hackers can exploit them. Ethical penetration testers use the same tools and techniques as cybercriminals but report findings so they can be fixed, helping organizations strengthen their security. This process is a critical part of a comprehensive cybersecurity program and helps ensure compliance with industry regulations.

What are the key skills and qualifications needed to thrive as an ethical penetration tester?

To thrive as an Ethical Penetration Tester, you need strong knowledge of network security, operating systems, and common vulnerabilities, typically backed by a degree in computer science or cybersecurity and relevant certifications like CEH or OSCP. Familiarity with tools such as Metasploit, Burp Suite, and Nmap is essential for simulating and assessing security threats. Critical thinking, problem-solving, and effective communication are key soft skills for identifying risks and clearly reporting findings to technical and non-technical stakeholders. These competencies ensure that security assessments are thorough, actionable, and help organizations strengthen their defenses against real-world cyber threats.

What are some common challenges faced by ethical penetration testers during client engagements?

Ethical penetration testers often encounter challenges such as limited timeframes to conduct thorough assessments, incomplete or ambiguous scope definitions from clients, and the need to balance effective testing with minimal disruption to live systems. Communication is key—testers must clearly report findings and collaborate with IT teams to remediate vulnerabilities. Additionally, staying current with emerging threats and tools is essential to deliver valuable insights and maintain industry standards.

What is the difference between Ethical Penetration Testing vs Vulnerability Analyst?

AspectEthical Penetration TestingVulnerability Analyst
CertificationsOSCP, CEH, GPENCompTIA Security+, CISSP, CEH
Work EnvironmentSimulated attacks on systems to identify security gapsAnalyzing vulnerabilities and assessing risk levels
Industry UsageSecurity firms, IT departments, consultingSecurity teams, risk management, compliance

Ethical Penetration Testers actively simulate cyberattacks to find exploitable weaknesses, while Vulnerability Analysts focus on identifying and prioritizing security flaws through assessments. Both roles require similar certifications and often work within the same industry sectors, but their core activities differ: testing versus analysis.

More about Ethical Penetration Testing jobs

What cities are hiring for Ethical Penetration Testing jobs?

Cities with the most Ethical Penetration Testing job openings:

What states have the most Ethical Penetration Testing jobs?

States with the most job openings for Ethical Penetration Testing jobs include:

Infographic showing various Ethical Penetration Testing job openings in the United States as of August 2026, with employment types broken down into 1% As Needed, 85% Full Time, 10% Part Time, 3% Contract, and 1% Nights. Highlights an 87% Physical, 3% Hybrid, and 10% Remote job distribution, with an average salary of $119,895 per year, or $57.6 per hour.

Cybersecurity Penetration Tester - TGEC

Astrion

FL • On-site

Full-time

This job post has expired today. Applications are no longer accepted.


Job description

Overview
Cybersecurity Penetration Tester - SME
LOCATION: Eglin AFB, FL
Clearance: Top Secret
JOB STATUS: Full Time
TRAVEL: 25% CONUS / OCONUS
Astrion offers comprehensive services that boost preparedness, optimize performance, and ensure success across various domains, from Cyber to Digital, Mission and Systems, servicing our nation's Civilian, Defense and Space communities. We support customers with Centers of Excellence in Washington DC, Huntsville, AL and Burlington, MA with an additional 36 locations across the U.S.
Astrion has an exciting opportunity for a Cybersecurity Penetration Tester for the TMAS 2 96 CTG Task Order, supporting the 48 CTS / TGEC.
Our cybersecurity test team is searching for new members to support the 48th Cyber Space Test Squadron (48 CTS) at Eglin Air Force Base, Colorado. The 48th CTS provides a range of cybersecurity support Applicants should be able to help conduct penetration testing and conduct security analysis on systems and/or software to understand and identify vulnerabilities. If you enjoy working in a fast-paced multi-disciplinary environment, learning new technology areas, this is the place for you. We provide several opportunities to learn ranging from on-the-job training with other team members to formal courses for unique technology areas.
We realize that no one will have all these qualifications. We are looking for people that can bring a strong foundation in one of the listed areas and are motivated to learn the others. Position responsibilities can span from compliance testing to penetration testing, depending on skillset.
REQUIRED QUALIFICATIONS / SKILLS
  • While there are no minimum education and experience levels required for a TMAS SME, the selectee must be regarded within the community of interest as a Subject Matter Expert in penetration testing from both technique and tools testing perspectives. This skill level will oversee the efforts of less senior staff and/or be responsible for the efforts of all staff assigned to a specific job.
  • Active Top Secret clearance. U.S. Citizenship;
  • Must have or be able to obtain DOD 8570 IAT Level 3 certification (CASP, CISSP, ISSEP, etc.) within 6 months of hire, and maintain certification throughout employment.
  • Extensive job experience as an ethical penetration tester
  • Extensive experience using modern penetration testing tools and methods
  • Experience in network security/engineering
  • Analytical skills and problem-solving skills.
  • Good organization, decision making, and verbal and written communication skills.
  • Excellent self-initiative and self-motivation with the ability to work under minimal supervision.
  • Ability to work effectively in small and large team settings to solve complex problems.
  • Demonstrated hands on penetration testing (i.e., industry certificate such as OSCP, HTB write ups, etc.)
  • Travel 15-20 weeks per year.

DESIRED QUALIFICATIONS / SKILLS
  • Knowledge of common wired and wireless network protocol structures
  • Proficient in software development
  • Experience using interpreted languages (Python, Ruby, PHP, etc.)
  • Knowledge of compiled languages (C, C++, Assembly, Java, etc.)
  • Certifications: OSCP, OSCE, GCIH, GPEN, GWAP, and/or CCNA

RESPONSIBILITIES
  • Conducting cybersecurity assessments, penetration testing, data collection, and reporting.
  • Performing system security analysis on systems and/or software to understand and identify vulnerabilities.
  • Executing hands-on testing which includes significant technical skills with multiple operating systems.
  • Documenting and communicating test results effectively to technical and non-technical user groups in written and oral formats on-technical user groups in written and oral formats.