ZipRecruiter

Log In

1

Ethical Penetration Testing Jobs (NOW HIRING)

GDIT

Penetration Tester - TS/SCI with Polygraph

Mclean, VA · On-site

$152K - $206K/yr

Conduct internal and external penetration testing of networks, web applications, databases, and ... CEH - Certified Ethical Hacker Certification, CPT - Certified Penetration Tester * Desired Skills:

Booz Allen Hamilton, Inc.

Penetration Tester

Herndon, VA · On-site

$86K - $198K/yr

Conduct testing and analysis to identify vulnerabilities and potential threat vectors in systems ... ethical use of AI tools. However, we want to ensure a fair candidate process based on your own ...

Booz Allen Hamilton

Penetration Tester

Herndon, VA · On-site

$86K - $198K/yr

Conduct testing and analysis to identify vulnerabilities and potential threat vectors in systems ... ethical use of AI tools. However, we want to ensure a fair candidate process based on your own ...

Navstar, Inc.

Penetration Tester, Senior

Annapolis, MD · On-site

Must have experience with penetration testing tools. * Must have experience in web development and ... Certified Ethical Hacker (CEH) * Certified Information Security Manager (CISM) * Certified Web ...

Booz Allen Hamilton, Inc.

Penetration Tester

Herndon, VA · On-site

$86K - $198K/yr

Conduct testing and analysis to identify vulnerabilities and potential threat vectors in systems ... ethical use of AI tools. However, we want to ensure a fair candidate process based on your own ...

next page

Showing results 1-20

All JobsEthical Penetration Testing Jobs

Ethical Penetration Testing information

See salary details

$22.5K

$119.9K

$168.5K

How much do ethical penetration testing jobs pay per year?

As of Jul 13, 2026, the average yearly pay for ethical penetration testing in the United States is $119,895.00, according to ZipRecruiter salary data. Most workers in this role earn between $96,000.00 and $141,000.00 per year, depending on experience, location, and employer.

What are some common challenges faced by ethical penetration testers during client engagements?

Ethical penetration testers often encounter challenges such as limited timeframes to conduct thorough assessments, incomplete or ambiguous scope definitions from clients, and the need to balance effective testing with minimal disruption to live systems. Communication is key—testers must clearly report findings and collaborate with IT teams to remediate vulnerabilities. Additionally, staying current with emerging threats and tools is essential to deliver valuable insights and maintain industry standards.

Will pentesters be replaced by AI?

Ethical penetration testers use their expertise to identify security vulnerabilities that AI tools cannot fully replicate, such as understanding complex systems and social engineering. While AI can assist in automating certain tasks, human judgment, creativity, and experience remain essential for effective security assessments and ethical hacking. Continuous learning and certification are important for pentesters to stay relevant as technology evolves.

Can you make $500,000 a year in cyber security?

Ethical penetration testers can potentially earn $500,000 annually with extensive experience, advanced certifications like OSCP or CISSP, and specialization in high-demand areas. Achieving this level often requires working for top firms, consulting, or holding senior leadership roles in cybersecurity. Income varies based on skills, location, and the complexity of engagements.

How much money do ethical hackers make?

Ethical penetration testers typically earn between $70,000 and $130,000 annually, depending on experience, certifications, and location. Senior professionals with advanced skills and certifications like OSCP or CISSP can earn higher salaries, especially in high-demand environments or consulting roles.

What is the difference between Ethical Penetration Testing vs Vulnerability Analyst?

AspectEthical Penetration TestingVulnerability Analyst
CertificationsOSCP, CEH, GPENCompTIA Security+, CISSP, CEH
Work EnvironmentSimulated attacks on systems to identify security gapsAnalyzing vulnerabilities and assessing risk levels
Industry UsageSecurity firms, IT departments, consultingSecurity teams, risk management, compliance

Ethical Penetration Testers actively simulate cyberattacks to find exploitable weaknesses, while Vulnerability Analysts focus on identifying and prioritizing security flaws through assessments. Both roles require similar certifications and often work within the same industry sectors, but their core activities differ: testing versus analysis.

What is ethical penetration testing?

Ethical penetration testing, also known as ethical hacking, is the practice of simulating cyberattacks on a computer system, network, or application with the permission of its owner. The goal is to identify security vulnerabilities before malicious hackers can exploit them. Ethical penetration testers use the same tools and techniques as cybercriminals but report findings so they can be fixed, helping organizations strengthen their security. This process is a critical part of a comprehensive cybersecurity program and helps ensure compliance with industry regulations.

Is penetration testing ethical?

Ethical penetration testing involves authorized security assessments to identify vulnerabilities in systems, helping organizations improve their security. It is conducted with permission, following legal and professional standards, and often requires certifications like CEH or OSCP. When performed responsibly, it is considered an ethical practice in cybersecurity.

What are the key skills and qualifications needed to thrive as an Ethical Penetration Tester, and why are they important?

To thrive as an Ethical Penetration Tester, you need strong knowledge of network security, operating systems, and common vulnerabilities, typically backed by a degree in computer science or cybersecurity and relevant certifications like CEH or OSCP. Familiarity with tools such as Metasploit, Burp Suite, and Nmap is essential for simulating and assessing security threats. Critical thinking, problem-solving, and effective communication are key soft skills for identifying risks and clearly reporting findings to technical and non-technical stakeholders. These competencies ensure that security assessments are thorough, actionable, and help organizations strengthen their defenses against real-world cyber threats.
More about Ethical Penetration Testing jobs
What cities are hiring for Ethical Penetration Testing jobs? Cities with the most Ethical Penetration Testing job openings:
What states have the most Ethical Penetration Testing jobs? States with the most job openings for Ethical Penetration Testing jobs include:
What job categories do people searching Ethical Penetration Testing jobs look for? The top searched job categories for Ethical Penetration Testing jobs are:
Ethical Penetration Testing jobs near you
Infographic showing various Ethical Penetration Testing job openings in the United States as of July 2026, with employment types broken down into 2% As Needed, 76% Full Time, 20% Part Time, and 2% Contract. Highlights an 92% Physical, 1% Hybrid, and 7% Remote job distribution, with an average salary of $119,895 per year, or $57.6 per hour.
Penetration Tester

Penetration Tester

Booz Allen Hamilton, Inc.

Fort George G Meade, MD • On-site

$86K - $198K/yr

Full-time

Medical, Life, Retirement, PTO

Posted 13 days ago

Booz Allen Hamilton rating

8.8

Company rating: 8.8 out of 10

Based on 47 frontline employees who took The Breakroom Quiz

9th of 58 rated business consultants

Job description

Penetration Tester
The Opportunity:
Conduct testing and analysis to identify vulnerabilities and potential threat vectors in systems and networks, develop exploits, and engineer attack methodologies. Leverage understanding of MITRE ATT&CK and common cybersecurity control implementations to plan and conduct threat-based assessments. Apply advanced advising skills, extensive technical expertise, and full industry knowledge. Develop innovative solutions to complex problems. Work without considerable direction, and mentor and supervise team members, as needed.
You Have:
  • 3+ years of experience with MITRE ATT&CK, test planning and security control assessment
  • 3+ years of experience with cyber penetration testing or developing risk and threat mitigation plans
  • 3+ years of experience operating in Linux, Windows, and virtual platforms
  • 3+ years of experience with computer attack methods and system exploitation techniques
  • 3+ years of experience leveraging adversarial tactics to conduct hands-on security testing
  • 3+ years of experience performing network security analysis, including software or traffic analysis
  • Secret clearance
  • HS diploma or GED

Nice If You Have:
  • Experience with Breach and Attack Simulation tools such as Atomic Red Team, Scythe, Mandiant ASV or AttackIQ
  • Experience manually auditing source code, including Java, Ruby, Python, JavaScript, Rust, or C, to find security issues
  • Experience with system security engineering and security architecture
  • Knowledge of tools, tactics, and techniques targeting Artificial Intelligence (AI) systems and their ecosystems
  • Bachelor's degree in CS, Information Systems, Engineering, or a related field
  • Offensive Security Certified Professional (OSCP), HTB Certified Penetration Tester Specialist (CPTS), eLearnSecurity Junior Penetration Tester (EJPT), GIAC Global Information Assurance Penetration Tester (GPEN), or GIAC Cloud Penetration Tester Certification

Clearance:
Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; Secret clearance is required.
Compensation
At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen's benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page.
Salary at Booz Allen is determined by various factors, including but not limited to location, the individual's particular combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements. The projected compensation range for this position is $86,900.00 to $198,000.00 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of Booz Allen's total compensation package for employees. This posting will close within 90 days from the Posting Date.
Identity Statement
As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud.
Candidate AI Usage Policy
AI is a part of our daily work at Booz Allen, and we are committed to the responsible and ethical use of AI tools. However, we want to ensure a fair candidate process based on your own skills and knowledge. As part of this commitment, the use of artificial intelligence (AI) or other tools to assist with responses during interviews (whether in-person or virtual) is prohibited unless permission is explicitly provided.
Work Model
Our people-first culture prioritizes the benefits of collaboration, whether it occurs in person or virtually. To support engagement and effective communication, employees working virtually are generally expected to have their cameras on during meetings.
  • Remote: If this position is listed as remote, there may still be occasions when you are required to work in person at a Booz Allen or customer facility.
  • Hybrid: If this position is listed as hybrid, you will be expected to work from a Booz Allen facility frequently, in alignment with leadership expectations and the needs of the role. You may also be required to work from or visit a customer facility.
  • Onsite: If this position is listed as onsite, work will primarily be performed at a Booz Allen office or customer facility, where employees will collaborate directly with colleagues and customers as required by the role.

Commitment to Non-Discrimination
All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local, or international law.

What Booz Allen Hamilton employees say

Pay

Benefits

Hours and flexibility

Workplace

Get the full story on Breakroom

Booz Allen Hamilton logo

About Booz Allen Hamilton

Sourced by ZipRecruiter

Booz Allen Hamilton is a leading provider of management and technology consulting services to the US government in defense, intelligence, and civil markets. Headquartered in McLean, Virginia, the firm also serves major corporations, institutions, and not-for-profit organizations. Founded in 1914 by Edwin G. Booz, the company has a long-standing tradition of helping clients achieve success by delivering a wide range of consulting services that include strategic planning, human capital and learning, communication, systems development, and others. The company's mission is to empower people to change the world, and it has a reputation for maintaining the highest standards of integrity and-excellence.

Industry

It services

Company size

10,000+ Employees

Headquarters location

McLean, VA, US

Year founded

1914

View All Booz Allen Hamilton Jobs

Apply