ZipRecruiter

Log In

1

Freelance Web App Penetration Testing Jobs (NOW HIRING)

Peraton

Penetration Tester

Arlington, VA · On-site

$86K - $138K/yr

... Web Security Testing Guide (WTG), etc. * Demonstrated ability to lead a penetration test and guide Senior/Junior Penetration Testers. * U.S. citizenship required. * An active Secret security ...

SkyePoint Decisions

Penetration Tester

Arlington, VA

$95K - $112K/yr

... Web Security Testing Guide (WTG), etc. * Demonstrated ability to lead a penetration test and guide Senior/Junior Penetration Testers. * U.S. citizenship required. * An active Secret security ...

Cyber Defense Technologies

Penetration Tester

Chantilly, VA · On-site

$90K - $130K/yr

Conduct penetration testing that uses both active and passive capabilities to expose and exploit IA ... System methodologies including: client/server, web hosting, web content servers, policy servers ...

M9 Solutions

Penetration Tester III

Chandler, AZ · On-site

The role involves conducting penetration testing, managing projects, and leading Red Team ... Company : M9 Solutions is a national staffing firm focused on cloud, cyber security, web ...

M9 Solutions

Penetration Tester II

Washington, DC · On-site

Responsibilities : • Conduct continuous penetration testing methodologies. • Plan and conduct ... Company : M9 Solutions is a national staffing firm focused on cloud, cyber security, web ...

Peraton

Penetration Tester

Arlington, VA

$86K - $138K/yr

... Web Security Testing Guide (WTG), etc. * Demonstrated ability to lead a penetration test and guide Senior/Junior Penetration Testers. * U.S. citizenship required. * An active Secret security ...

Quzara LLC

Senior Penetration Tester

Washington, DC · On-site

$145K - $180K/yr

... Web Applications * Assess and test the security of internal networks and underlying application infrastructure. * Conduct penetration testing and vulnerability assessments on Azure cloud ...

Amatriot Group, LLC

Penetration Tester

Rensselaer, NY · On-site

$90K - $105K/yr

Key Responsibilities Penetration Testing and Vulnerability Assessment * Conduct penetration tests ... Proficiency in web application security principles, including OWASP. * Knowledge of common web ...

M9 Solutions

Penetration Tester II

Chandler, AZ · On-site

... device testing. Responsibilities : • Conducting penetration tests on various systems and ... Company : M9 Solutions is a national staffing firm focused on cloud, cyber security, web ...

Dark Wolf Solutions

Penetration Tester

Colorado Springs, CO · On-site

$130K - $145K/yr

Dark Wolf is actively seeking an experienced Penetration Tester to join our innovative team. This ... Web Services (AWS), Microsoft Azure, and Google Cloud Platform (GCP) * Proficiency in the testing ...

Dark Wolf Solutions

Penetration Tester

Colorado Springs, CO · Hybrid

$130K - $145K/yr

Dark Wolf is actively seeking an experienced Penetration Tester to join our innovative team. This ... Web Services (AWS), Microsoft Azure, and Google Cloud Platform (GCP) * Proficiency in the testing ...

M9 Solutions

Penetration Tester II

Chandler, AZ · On-site

... penetration testing and support government contracts, requiring an active Secret clearance ... Company : M9 Solutions is a national staffing firm focused on cloud, cyber security, web ...

previous page

Showing results 41-60

All Jobsfreelance JobsTechnology JobsSoftware JobsSoftware Quality Engineer JobsFreelance Web App Penetration Testing Jobs

Freelance Web App Penetration Testing information

See salary details

$23

$34

$42

How much do freelance web app penetration testing jobs pay per hour?

As of Aug 17, 2026, the average hourly pay for freelance web app penetration testing in the United States is $34.86, according to ZipRecruiter salary data. Most workers in this role earn between $28.85 and $40.87 per hour, depending on experience, location, and employer.

What is freelance web app penetration testing?

Freelance web app penetration testing is the process where independent security professionals are hired to assess the security of web applications. These testers simulate cyberattacks to identify vulnerabilities in a web app's code, configuration, and deployment. Their findings help organizations fix security issues before attackers can exploit them. Freelancers typically work on a project-by-project basis and may serve clients ranging from startups to large enterprises.

What are the key skills and qualifications needed to thrive as a freelance web app penetration tester?

To thrive as a Freelance Web App Penetration Tester, you need a strong understanding of web application security, vulnerability assessment, and common attack vectors, often supported by certifications like OSCP or CEH. Proficiency with tools such as Burp Suite, OWASP ZAP, and scripting languages (e.g., Python) is typically required. Excellent analytical thinking, problem-solving skills, and clear client communication set top testers apart. These skills and qualifications are vital to accurately identify threats, deliver actionable reports, and maintain client trust in a constantly evolving security landscape.

What are some common challenges freelance web app penetration testers face when working with clients remotely?

Freelance web app penetration testers often encounter challenges such as limited access to in-depth application documentation, coordinating testing schedules across different time zones, and ensuring clear communication about testing scope and reporting expectations. Building trust with new clients can also be tricky, especially when handling sensitive data or recommending remediation steps. Successful testers proactively address these issues by setting clear agreements, using secure communication tools, and providing concise, actionable reports that demonstrate professionalism and value.

What is the difference between Freelance Web App Penetration Testing vs Freelance Cybersecurity Consultant?

AspectFreelance Web App Penetration TestingFreelance Cybersecurity Consultant
CertificationsOSCP, CEH, OSWECISSP, CISA, CEH
Work EnvironmentFocused on web application security testingBroader security strategy and risk management
Industry UsageWeb development, tech startups, security firmsAll industries requiring security advice
Search IntentWeb app testing freelance jobsSecurity consulting freelance opportunities

Freelance Web App Penetration Testing specializes in testing web applications for vulnerabilities, often requiring specific certifications like OSCP or OSWE. Freelance Cybersecurity Consultants provide broader security advice across systems, networks, and policies, with certifications like CISSP or CISA. While both roles involve security expertise, web app penetration testers focus on application-specific testing, whereas cybersecurity consultants offer comprehensive security strategies.

More about Freelance Web App Penetration Testing jobs

What cities are hiring for Freelance Web App Penetration Testing jobs?

Cities with the most Freelance Web App Penetration Testing job openings:

What are the most commonly searched types of Web App Penetration Testing jobs?

The most popular types of Web App Penetration Testing jobs are:

What states have the most Freelance Web App Penetration Testing jobs?

States with the most job openings for Freelance Web App Penetration Testing jobs include:

What job categories do people searching Freelance Web App Penetration Testing jobs look for?

The top searched job categories for Freelance Web App Penetration Testing jobs are:

Freelance Web App Penetration Testing jobs near you
Infographic showing various Freelance Web App Penetration Testing job openings in the United States as of August 2026, with employment types broken down into 44% Full Time, 31% Part Time, and 25% Contract. Highlights an 81% In-person, and 19% Remote job distribution, with an average salary of $72,500 per year, or $34.9 per hour.

Penetration Tester

Peraton

Arlington, VA • On-site

$86K - $138K/yr

Full-time

Re-posted 12 days ago

Peraton rating

8.3

Company rating: 8.3 out of 10

Based on 56 frontline employees who took The Breakroom Quiz

51st of 224 rated it services

Job description

Responsibilities
Peraton is seeking an experienced Cyber Penetration Tester to become part of Peratons' Federal Strategic Cyber programs.
Location: Northern VA; Hybrid - flex as long as person can come on-site as/when needed.
In this role, you will:
  • Support the Red Cell Team by performing and leading penetration tests to assess the security of customer systems.
  • Identify vulnerabilities and develop recommended remediations to satisfy mandated NIST 800-53 security controls.
  • Report and demonstrate findings to system owners and engineers.
  • Maintain Red Cell infrastructure.
  • Develop or modify tools to automate discovery or exploitation.

Qualifications
Basic Qualifications:
  • Bachelor of Science and 5 years of relevant experience in Cyber/IT, or a Master's of Science and 3 years of relevant experience in Cyber/IT. In lieu of a degree, 4 years of additional IT security or penetration testing experience may be considered.
  • Minimum of 2 years with penetration testing experience.
  • Possess one of the following certifications, OR be able to obtain before start date:
    • CCNA Cyber Ops, CCNA-Security, CEH, CFR, Cloud+, CySA+, GCIA, GCIH, GICSP, SCYBER, Security+ CE, SSCP
  • Demonstrated experience with Kali Linux.
  • Demonstrated penetration testing tools experience with Nmap, Burp Suite, Metasploit, etc.
  • Demonstrated ability in evaluating vulnerabilities, performing root cause analysis, and reporting findings utilizing assessment methodologies such as NIST SP 800-115, Penetration Testing Execution Standard (PTES), Information Systems Security Assessment Framework (ISSAF), OWASP Web Security Testing Guide (WTG), etc.
  • Demonstrated ability to lead a penetration test and guide Senior/Junior Penetration Testers.
  • U.S. citizenship required.
  • An active Secret security clearance.
    • Must have the ability to obtain a final Top Secret security clearance.

Preferred:
  • Active Top Secret or TS/SCI clearance.
  • One of the following certifications or an alternate, verifiable certification demonstrating IT security competence:
    • CompTIA CASP+
    • ISC2 Certified Information Security Professional (CISSP)
    • ISC2 Certified Cloud Security Professional (CCSP)
    • ISC2 Information Systems Security Engineering Professional (ISSEP)
  • One of the following certifications or an alternate, verifiable certification demonstrating practical penetration testing competence:
    • Offensive Security Certified Professional (OSCP)
    • Offensive Security Certified Professional (OSCP)
    • Hack the Box Certified Penetration Testing Specialist (CPTS)
    • TCM Security Practical Network Penetration Tester (PNPT)
    • GIAC Exploit Researcher and Advanced Penetration Tester (GXPN)
    • Zero Point Security Red Team Ops II
  • Advanced understanding of the following:
    • NIST Risk Management Framework (RMF) and the Assessment and Authorization (A&A) process.
    • Security principles such as CIA, IAAAA, access control models, risk management, etc.
    • Networking principles and technologies such as IP routing, TCP/UDP, VPNs, firewalls, NAT, etc.
    • Common network protocols such as SSH, FTP, SMTP, SMB, HTTP, etc.
    • Operating system principles such as process management, device management, user management, file systems, etc.
    • Data processing principles such as encoding, hashing, encryption, etc.
    • Scripting and programming languages such as Bash, Python, PowerShell, JavaScript, etc.
    • Common application vulnerabilities and exploits such as outdated components,
    • permissions mis-configurations, lack of input validation, logging/monitoring failures, etc.
    • Common web application vulnerabilities and exploits such as XSS, SQLi, LFI, file uploads, broken authentication mechanisms, etc.
    • Active Directory (AD) enumeration and attacks such as kerberoasting, AS-REP roasting, abusing mis-configured privileges, crafting golden tickets, etc.
    • Public Key Infrastructure (PKI) and navigating IT environments implementing multifactor authentication.
    • Cloud technologies and platforms such as Amazon Web Services (AWS), Microsoft Azure, Google Cloud Platform (GCP), etc.

#DSCM
Peraton Overview
Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world's leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees do the can't be done by solving the most daunting challenges facing our customers. Visit peraton.com to learn how we're keeping people around the world safe and secure.
Target Salary Range
$86,000 - $138,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual's experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.
EEO
EEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.

What Peraton employees say

Pay

Benefits

Hours and flexibility

Workplace

Get the full story on Breakroom

Peraton logo

About Peraton

Sourced by ZipRecruiter

At Peraton, we re at the forefront of delivering the next big thing every day. We re the partner of choice to help solve some of the world s most daunting challenges, delivering bold, new solutions to keep people around the world safer and more secure.

Industry

It services

Company size

10,000+ Employees

Headquarters location

Herndon, VA, US

Year founded

2017

View All Peraton Jobs

Apply