ZipRecruiter

Log In

1

Internship Web App Penetration Testing Jobs (NOW HIRING)

Aprio

Senior Penetration Testing Specialist

Required : • Have experience with cloud infrastructure offensive security assessments (e.g., AWS, Azure, GCP), web application and API penetration testing, and traditional network penetration ...

GDIT

WV · On-site

Conduct web, mobile, API, and microservices security testing using industrystandard tools and manual exploitation techniques. * Execute AWS cloud penetration testing within approved boundaries (IAM ...

Goldbelt, Inc.

Senior Penetration Tester

$90K - $150K/yr

Summary: The Senior Penetration Tester will independently perform penetration testing of ... testing standards and projects, including OWASP * Knowledge of databases, applications, and Web ...

LPL Financial

AVP, Penetration Tester

San Diego, CA · On-site

Conduct tactical penetration testing assessments of web, mobile, and API applications against OWASP Top 10 threats and emerging risks, and collaborate with Application Security teams to provide ...

next page

Showing results 1-20

All JobsWeb App Penetration Testing JobsInternship Web App Penetration Testing Jobs

Internship Web App Penetration Testing information

See salary details

$5

$12

$19

How much do internship web app penetration testing jobs pay per hour?

As of Jul 13, 2026, the average hourly pay for internship web app penetration testing in the United States is $12.53, according to ZipRecruiter salary data. Most workers in this role earn between $8.41 and $14.42 per hour, depending on experience, location, and employer.

What is an Internship Web App Penetration Tester?

An Internship Web App Penetration Tester is a student or entry-level professional who assists in assessing the security of web applications by simulating cyberattacks. Their role involves identifying vulnerabilities, exploiting potential weaknesses, and documenting findings under the guidance of experienced security professionals. This hands-on experience helps interns learn about common web application threats, security tools, and best practices in cybersecurity. The position is often part of a learning program to prepare individuals for a career in penetration testing or information security.

What are the key skills and qualifications needed to thrive as an Internship Web App Penetration Tester, and why are they important?

To thrive as an Internship Web App Penetration Tester, you need a foundational understanding of web application architectures, common vulnerabilities (like those in OWASP Top 10), and basic programming or scripting knowledge. Familiarity with tools such as Burp Suite, OWASP ZAP, and basic command-line utilities, along with ongoing coursework or certifications like CompTIA Security+ or OSCP, is highly beneficial. Strong analytical thinking, attention to detail, and effective written communication make candidates stand out in this field. These skills ensure interns can identify, document, and help remediate security weaknesses, contributing to safer web applications.

What types of tasks and projects can I expect to work on during an Internship in Web App Penetration Testing?

As an intern in Web App Penetration Testing, you'll typically assist with vulnerability assessments, security testing of web applications, and documentation of your findings. You'll likely use tools such as Burp Suite, OWASP ZAP, and manual testing methods to identify common vulnerabilities like SQL injection and cross-site scripting. Interns often work closely with experienced penetration testers and developers, learning how to communicate security risks and collaborating on solutions. This hands-on experience provides valuable insight into secure coding practices and real-world remediation processes.
More about Internship Web App Penetration Testing jobs
What cities are hiring for Internship Web App Penetration Testing jobs? Cities with the most Internship Web App Penetration Testing job openings:
What are the most commonly searched types of Web App Penetration Testing jobs? The most popular types of Web App Penetration Testing jobs are:
What states have the most Internship Web App Penetration Testing jobs? States with the most job openings for Internship Web App Penetration Testing jobs include:
What job categories do people searching Internship Web App Penetration Testing jobs look for? The top searched job categories for Internship Web App Penetration Testing jobs are:
Internship Web App Penetration Testing jobs near you
Infographic showing various Internship Web App Penetration Testing job openings in the United States as of July 2026, with employment types broken down into 41% Full Time, 51% Part Time, and 8% Contract. Highlights an 97% Physical, 1% Hybrid, and 2% Remote job distribution, with an average salary of $26,055 per year, or $12.5 per hour.
Security Consultant II (Web Application Penetration Tester)

Security Consultant II (Web Application Penetration Tester)

NetSPI LLC

Minneapolis, MN

Full-time

Posted 7 days ago

Job description

NetSPI® pioneered Penetration Testing as a Service (PTaaS) and leads the industry in modern pentesting. Combining world-class security professionals with AI and automation, NetSPI delivers clarity, speed, and scale across 50+ pentest types, attack surface management, and vulnerability prioritization. The NetSPI platform streamlines workflows and accelerates remediation, enabling our experts to focus on deep dive testing that uncovers vulnerabilities others miss. Trusted by the top 10 U.S. banks and Fortune 500 companies worldwide, NetSPI has been driving security innovation since 2001.

NetSPI is on an exciting growth journey as we disrupt and improve the proactive security market. We are looking for individuals with a collaborative, innovative, and customer-first mindset to join our team. Learn more about our award-winning workplace culture and get to know our A-Team at www.netspi.com/careers.

Join the mission as a Security Consultant II. We are seeking a skilled and detail-oriented Penetration Tester to conduct thorough security assessments, identify vulnerabilities, and provide expert recommendations to strengthen our clients' security posture. As a Penetration Tester supporting web applications, you will work closely with clients to deliver clear, actionable reports and contribute to the development of security best practices.

Responsibilities:

  • Conduct penetration testing engagements on web applications and underlying APIs.
  • Create, deliver, and collaborate on penetration testing reports in diverse client environments, maintaining client-specific processes, reporting standards, and access protocols to help improve their security posture.
  • Research and develop innovative techniques, tools, and methodologies for penetration testing services, alongside commitment to improvement and execution on NetSPI specific products and processes
  • Perform administrative tasks related to day-to-day consulting activities to ensure smooth business and engagement operations.

Minimum Qualifications:

  • Bachelor’s degree or higher required, with a concentration in Computer Science, Engineering, Math, or IT preferred, or equivalent experience
  • Minimum of 2-3 years of work experience in application penetration testing
  • Familiarity with offensive tools, based on applicable skillset (e.g., Kali Linux, Burp Suite, Metasploit, Nessus)
  • Familiarity with offensive and defensive IT concepts and protocols
  • Extensive understanding of the OWASP Top 10 and various security frameworks.
  • Working knowledge of Windows, Linux and MacOS operating systems internals
  • Ability to work independently and as part of a team
  • Proficient communication skills, both written and verbal
  • Willingness to travel up to 5-10%
  • This position requires an 8-hour workday, with occasional evenings or weekends necessary to meet project deadlines or critical needs

Preferred Qualifications:

  • Experience mentoring or coaching to growing team members, while sharing knowledge externally through blogs, hosting webinars, or presenting at conferences
  • Experience in one or more of the following programming or scripting languages (e.g., Ruby, Python, Perl, C, C++, Java, and C#)
  • Offensive cybersecurity certifications (e.g., GXPN, GPEN, OSCP, CISSP, GWAPT)

We are an equal employment opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status or any other characteristic protected by law.