ZipRecruiter

Log In

1

In Penetration Testing Jobs (NOW HIRING)

JP Morgan Chase

Senior Penetration Tester

Manhattan, NY · On-site

We are seeking candidates with a passion for offensive security, deep technical expertise in penetration testing, and a commitment to continuous learning and excellence. Job responsibilities * Plan ...

AMERICAN SYSTEMS

Senior Penetration Tester

Middletown, RI · On-site

$118K - $128K/yr

A minimum of 5 years of experience in penetration testing, with at least 2 years focused on submarine or maritime systems. * Top Secret Clearance * Relevant certifications such as OSCP, OSCE, CEH ...

next page

Showing results 1-20

All JobsIn Penetration Testing Jobs

In Penetration Testing information

See salary details

$22.5K

$119.9K

$168.5K

How much do in penetration testing jobs pay per year?

As of Jul 21, 2026, the average yearly pay for in penetration testing in the United States is $119,895.00, according to ZipRecruiter salary data. Most workers in this role earn between $96,000.00 and $141,000.00 per year, depending on experience, location, and employer.

What jobs can I get with a security+ certification?

A Security+ certification qualifies you for roles such as security analyst, cybersecurity technician, or network security administrator. These positions involve implementing security measures, monitoring networks, and responding to security incidents, often requiring knowledge of security tools and protocols.

What are the key skills and qualifications needed to thrive as a Penetration Tester, and why are they important?

To thrive as a Penetration Tester, you need a deep understanding of network protocols, operating systems, security vulnerabilities, and commonly hold certifications like OSCP or CEH. Familiarity with tools such as Metasploit, Burp Suite, Nmap, and Kali Linux is typically required to conduct effective assessments. Strong analytical thinking, attention to detail, and clear communication skills set standout professionals apart in this field. These skills and qualities are crucial for identifying security weaknesses, delivering actionable recommendations, and helping organizations strengthen their cybersecurity defenses.

Will pentesters be replaced by AI?

Penetration testers perform manual security assessments that require critical thinking, creativity, and understanding of complex systems, which AI currently cannot fully replicate. While AI tools can assist in automating certain tasks like vulnerability scanning, human expertise remains essential for interpreting results and developing effective security strategies.

Can you make $500,000 a year in cyber security?

In penetration testing, earning $500,000 annually is possible for highly experienced professionals working in senior roles, consulting, or managing large security teams. Achieving this income typically requires advanced certifications, specialized skills, and extensive industry experience, often in high-demand sectors or with consulting firms. Most penetration testers earn between $70,000 and $150,000 per year, with top-tier experts reaching higher salaries through freelance work or leadership positions.

What is penetration testing?

Penetration testing, often called 'pen testing,' is a simulated cyberattack performed to identify and exploit vulnerabilities in an organization's computer systems, networks, or applications. The goal is to uncover security weaknesses that malicious hackers could exploit and to help organizations strengthen their defenses. Pen testers use various tools and techniques to mimic real-world attacks, providing valuable insights and recommendations for improving overall security. Regular penetration testing is essential for maintaining a robust cybersecurity posture and complying with industry regulations.

What is the difference between In Penetration Testing vs Vulnerability Assessment?

AspectIn Penetration TestingVulnerability Assessment
PurposeSimulates cyberattacks to identify exploitable vulnerabilitiesIdentifies and reports security weaknesses without exploiting them
DepthIn-depth, targeted testing with active exploitationBroad, automated or manual scanning for vulnerabilities
CertificationsOSCP, CEH, GPENOSCP, CEH, CISSP (common but less focused)
Work EnvironmentEngages in simulated attacks, often in controlled environmentsUses scanning tools, reports vulnerabilities

While both roles focus on identifying security issues, In Penetration Testing involves actively exploiting vulnerabilities to assess security defenses, whereas Vulnerability Assessment primarily identifies weaknesses without exploitation. Penetration testers provide deeper insights into potential attack vectors, making their work more targeted and detailed.

What are some common challenges faced by penetration testers during client engagements?

Penetration testers often encounter challenges such as limited timeframes for assessments, incomplete or outdated documentation about client systems, and varying levels of cooperation from internal teams. Navigating complex network architectures and adapting to unique security configurations can also be demanding. Effective communication is essential, as testers must clearly explain findings and remediation steps to both technical and non-technical stakeholders. These challenges require strong problem-solving skills, adaptability, and the ability to work collaboratively across departments.

Is penetration testing a good career?

Penetration testing is a valuable cybersecurity role focused on identifying vulnerabilities in systems and networks. It requires technical skills, knowledge of security tools, and often certifications like OSCP or CEH. The field offers strong job growth, competitive salaries, and opportunities for continuous learning.
More about In Penetration Testing jobs
What cities are hiring for In Penetration Testing jobs? Cities with the most In Penetration Testing job openings:
What states have the most In Penetration Testing jobs? States with the most job openings for In Penetration Testing jobs include:
What job categories do people searching In Penetration Testing jobs look for? The top searched job categories for In Penetration Testing jobs are:
In Penetration Testing jobs near you
Infographic showing various In Penetration Testing job openings in the United States as of July 2026, with employment types broken down into 1% As Needed, 73% Full Time, 21% Part Time, 1% Temporary, and 4% Contract. Highlights an 92% Physical, 1% Hybrid, and 7% Remote job distribution, with an average salary of $119,895 per year, or $57.6 per hour.
Senior Penetration Tester

Senior Penetration Tester

JP Morgan Chase

Manhattan, NY • On-site

Full-time

Medical, Retirement

Re-posted 24 days ago

JPMorgan Chase & Co. rating

8.0

Company rating: 8.0 out of 10

Based on 491 frontline employees who took The Breakroom Quiz

58th of 149 rated banks

Job description

This position is also open in the following locations: Tampa, FL / Atlanta, FL / Plano, TX / Columbus, OH / McLean, VA / Wilmington, DE / Jersey City, NJ / Chicago, IL / Brooklyn, NY / Houston, TX

Drive the security of critical banking applications and platforms through hands-on offensive testing.

As an Assessments & Exercises Vice President in the Cybersecurity and Technology Controls organization, you will play a key role in safeguarding the firm's most vital assets. Your primary responsibility will be to plan, execute, and report on penetration tests targeting high-impact applications, platforms, and services. Leveraging industry-standard methodologies and advanced techniques, you will proactively identify vulnerabilities, collaborate with application owners to understand root causes, and guide effective remediation to strengthen the firm's security posture.

We are seeking candidates with a passion for offensive security, deep technical expertise in penetration testing, and a commitment to continuous learning and excellence.

Job responsibilities

  • Plan, scope, and execute penetration testing engagements across a variety of environments, including web applications, APIs, cloud platforms, infrastructure, thick-client, and/or mobile applications.
  • Collect and validate pre-requisites for each engagement, ensuring all necessary access, documentation, and approvals are in place.
  • Perform manual and automated testing to identify vulnerabilities, misconfigurations, and security weaknesses, leveraging industry-standard tools and custom scripts.
  • Document and communicate findings through comprehensive reports that include technical details, risk assessments, and actionable remediation recommendations.
  • Conduct peer reviews of penetration test reports to ensure accuracy, consistency, and quality of deliverables.
  • Collaborate with development, infrastructure, and security teams to clarify findings, support remediation efforts, and provide subject matter expertise on offensive security.
  • Stay current with emerging threats, vulnerabilities, and attack techniques by leveraging threat intelligence, security research, and participation in relevant industry groups.
  • Contribute to the continuous improvement of penetration testing methodologies, tools, and frameworks to enhance effectiveness and alignment with firm strategy and regulatory requirements.

Required qualifications, capabilities, and skills

  • 5+ years of hands-on penetration testing experience in offensive security, with a proven track record of scoping, executing, and reporting on complex engagements.
  • Expertise in manual penetration testing of web, API, cloud (AWS/Azure/GCP), infrastructure, thick-client, and/or mobile applications (android/iOS), including the use of industry-standard tools (e.g., Burp Suite, Nmap, Metasploit, etc.).
  • Strong understanding of security assessment methodologies such as OWASP Top Ten, NIST Cybersecurity Framework, and other relevant standards.
  • Ability to identify and articulate systemic security issues related to threats, vulnerabilities, and risks, and provide clear, actionable recommendations for remediation.
  • Exceptional organizational and communication skills, including the ability to write detailed technical reports and present findings to both technical and non-technical stakeholders.
  • Experience conducting peer reviews of penetration test reports and mentoring junior testers.
  • Continuous learner who keeps up with the latest offensive security trends, tools, and techniques.

Preferred qualifications, capabilities, and skills

  • Knowledge of cybersecurity practices, operational risk management, and incident response methodologies within the US financial services sector, including relevant regulations, threats, and risks.
  • Proficiency in penetration testing and security concepts for both Windows and Unix-like operating systems.
  • Experience conducting security-focused source code reviews (e.g., Python, Java, Rust).
  • Experience in reverse engineering thick-client and mobile applications to identify vulnerabilities.
  • Relevant certifications such as OSWE, CREST (CRT, CCT), OSCP, OSCE, GXPN, GWAPT, GPEN, GMOB, or BSCP. GXPN, GWAPT, GPEN, GMOB, or BSCP

#CTC

Chase is a leading financial services firm, helping nearly half of America's households and small businesses achieve their financial goals through a broad range of financial products. Our mission is to create engaged, lifelong relationships and put our customers at the heart of everything we do. We also help small businesses, nonprofits and cities grow, delivering solutions to solve all their financial needs. 

We offer a competitive total rewards package including base salary determined based on the role, experience, skill set and location. Those in eligible roles may receive commission-based pay and/or discretionary incentive compensation, paid in the form of cash and/or forfeitable equity, awarded in recognition of individual achievements and contributions.  We also offer a range of benefits and programs to meet employee needs, based on eligibility. These benefits include comprehensive health care coverage, on-site health and wellness centers, a retirement savings plan, backup childcare, tuition reimbursement, mental health support, financial coaching and more. Additional details about total compensation and benefits will be provided during the hiring process. 

We recognize that our people are our strength and the diverse talents they bring to our global workforce are directly linked to our success. We are an equal opportunity employer and place a high value on diversity and inclusion at our company. We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law. We also make reasonable accommodations for applicants' and employees' religious practices and beliefs, as well as mental health or physical disability needs. Visit our FAQs for more information about requesting an accommodation.

Equal Opportunity Employer/Disability/Veterans

Our Consumer & Community Banking division serves our Chase customers through a range of financial services, including personal banking, credit cards, mortgages, auto financing, investment advice, small business loans and payment processing. We're proud to lead the U.S. in credit card sales and deposit growth and have the most-used digital solutions - all while ranking first in customer satisfaction.

What JPMorgan Chase & Co. employees say

Pay

Benefits

Hours and flexibility

Workplace

Get the full story on Breakroom

Apply