Execute web application, API and mobile penetration tests with a focus on manual testing beyond automated scanning - business logic, authentication abuse, authorization flaws, and injection chains
Execute web application, API and mobile penetration tests with a focus on manual testing beyond automated scanning - business logic, authentication abuse, authorization flaws, and injection chains
Penetration Tester III
Chandler, AZ · On-site
... Mobile Device Application penetration testing. • Conducting Federal and Commercial Cloud technology penetration testing. • Conducting High Value Asset Assessments. Qualifications : Required : • ...
Penetration Tester III
Chandler, AZ · On-site
... Mobile Device Application penetration testing. • Conducting Federal and Commercial Cloud technology penetration testing. • Conducting High Value Asset Assessments. Qualifications : Required : • ...
Penetration Tester II
Washington, DC · On-site
Responsibilities : • Conduct continuous penetration testing methodologies. • Plan and conduct Red Team engagements. • Perform IoT device penetration testing methodologies. • Conduct Mobile ...
Penetration Tester II
Washington, DC · On-site
Responsibilities : • Conduct continuous penetration testing methodologies. • Plan and conduct Red Team engagements. • Perform IoT device penetration testing methodologies. • Conduct Mobile ...
Penetration Tester
Rensselaer, NY · On-site
$90K - $105K/yr
Experience with mobile application penetration testing. * Knowledge of regulations such as HIPAA. * Experience with API testing. #LI-BM1
Quick apply
Penetration Tester
Rensselaer, NY · On-site
$90K - $105K/yr
Experience with mobile application penetration testing. * Knowledge of regulations such as HIPAA. * Experience with API testing. #LI-BM1
Penetration Tester II
Chandler, AZ · On-site
... with Mobile Device Application penetration testing. • Experience with Federal and Commercial Cloud technology penetration testing. • Experience conducting High Value Asset Assessments. • ...
Penetration Tester II
Chandler, AZ · On-site
... with Mobile Device Application penetration testing. • Experience with Federal and Commercial Cloud technology penetration testing. • Experience conducting High Value Asset Assessments. • ...
Penetration Tester
Los Angeles, CA · On-site
Position : Penetration Tester Locations: Los Angeles( CA), Dallas (TX), Washington DC ... Perform penetration tests against external networks, internal networks, web applications, mobile ...
Penetration Tester
Los Angeles, CA · On-site
Position : Penetration Tester Locations: Los Angeles( CA), Dallas (TX), Washington DC ... Perform penetration tests against external networks, internal networks, web applications, mobile ...
Penetration Tester II
Chandler, AZ · On-site
... Mobile Device Application penetration testing. • Executing High Value Asset Assessments. • Utilizing various methodologies for penetration testing. • Gathering information and conducting ...
Penetration Tester II
Chandler, AZ · On-site
... Mobile Device Application penetration testing. • Executing High Value Asset Assessments. • Utilizing various methodologies for penetration testing. • Gathering information and conducting ...
Penetration Tester III
Chandler, AZ · On-site
... with Mobile Device Application penetration testing. • Experience with Federal and Commercial Cloud technology penetration testing. • Experience conducting High Value Asset Assessments. • ...
Penetration Tester III
Chandler, AZ · On-site
... with Mobile Device Application penetration testing. • Experience with Federal and Commercial Cloud technology penetration testing. • Experience conducting High Value Asset Assessments. • ...
Penetration Tester
Quantico, VA · Hybrid
Penetration Testing ... Conduct penetration tests of web applications, mobile applications, networks, cloud environments ...
Penetration Tester
Quantico, VA · Hybrid
Penetration Testing ... Conduct penetration tests of web applications, mobile applications, networks, cloud environments ...
Penetration Tester
Chantilly, VA · On-site
... Penetration Tester to perform computer network evaluations and penetration security assessments ... ESXi or similar; mobile platforms are a plus. • Solid understanding of networking, TCP/IP ...
Penetration Tester
Chantilly, VA · On-site
... Penetration Tester to perform computer network evaluations and penetration security assessments ... ESXi or similar; mobile platforms are a plus. • Solid understanding of networking, TCP/IP ...
Penetration Tester
Quantico, VA · On-site
$130K - $147K/yr
Penetration Testing ... Conduct penetration tests of web applications, mobile applications, networks, cloud environments ...
Penetration Tester
Quantico, VA · On-site
$130K - $147K/yr
Penetration Testing ... Conduct penetration tests of web applications, mobile applications, networks, cloud environments ...
Experience performing IoT, mobile, and cloud penetration testing * Experience supporting High Value Asset (HVA) assessments * Experience applying MITRE ATT&CK, OSSTMM, OWASP, NIST, PTES, and ISSAF ...
Experience performing IoT, mobile, and cloud penetration testing * Experience supporting High Value Asset (HVA) assessments * Experience applying MITRE ATT&CK, OSSTMM, OWASP, NIST, PTES, and ISSAF ...
Penetration Tester II
Washington, DC · On-site
... with Mobile Device Application penetration testing. • Experience with Federal and Commercial Cloud technology penetration testing. • Experience conducting High Value Asset Assessments. • ...
Penetration Tester II
Washington, DC · On-site
... with Mobile Device Application penetration testing. • Experience with Federal and Commercial Cloud technology penetration testing. • Experience conducting High Value Asset Assessments. • ...
Penetration Tester
$155K/yr
Key Responsibilities This role will be responsible for conducting network, application (API, mobile, and web), and Social Engineering penetration testing. Specifically, you would: * Work closely with ...
Penetration Tester
$155K/yr
Key Responsibilities This role will be responsible for conducting network, application (API, mobile, and web), and Social Engineering penetration testing. Specifically, you would: * Work closely with ...
Penetration Tester II
Chandler, AZ · On-site
... with Mobile Device Application penetration testing. • Experience with Federal and Commercial Cloud technology penetration testing. • Experience conducting High Value Asset Assessments. • ...
Penetration Tester II
Chandler, AZ · On-site
... with Mobile Device Application penetration testing. • Experience with Federal and Commercial Cloud technology penetration testing. • Experience conducting High Value Asset Assessments. • ...
Penetration Tester III
Washington, DC · On-site
... with Mobile Device Application penetration testing. • Experience with Federal and Commercial Cloud technology penetration testing. • Experience conducting High Value Asset Assessments. • ...
Penetration Tester III
Washington, DC · On-site
... with Mobile Device Application penetration testing. • Experience with Federal and Commercial Cloud technology penetration testing. • Experience conducting High Value Asset Assessments. • ...
Penetration Tester
Colorado Springs, CO · On-site
$130K - $145K/yr
Dark Wolf is actively seeking an experienced Penetration Tester to join our innovative team. This ... Proficiency in the testing and assessment of mobile operating systems, embedded systems, and/or IoT ...
Penetration Tester
Colorado Springs, CO · On-site
$130K - $145K/yr
Dark Wolf is actively seeking an experienced Penetration Tester to join our innovative team. This ... Proficiency in the testing and assessment of mobile operating systems, embedded systems, and/or IoT ...
Penetration Tester
Colorado Springs, CO · Hybrid
$130K - $145K/yr
Dark Wolf is actively seeking an experienced Penetration Tester to join our innovative team. This ... Proficiency in the testing and assessment of mobile operating systems, embedded systems, and/or IoT ...
Penetration Tester
Colorado Springs, CO · Hybrid
$130K - $145K/yr
Dark Wolf is actively seeking an experienced Penetration Tester to join our innovative team. This ... Proficiency in the testing and assessment of mobile operating systems, embedded systems, and/or IoT ...
Penetration Tester
Quantico, VA · Hybrid
Penetration Testing ... Conduct penetration tests of web applications, mobile applications, networks, cloud environments ...
Penetration Tester
Quantico, VA · Hybrid
Penetration Testing ... Conduct penetration tests of web applications, mobile applications, networks, cloud environments ...
Senior Penetration Tester
Herndon, VA · On-site
$120 - $150/hr
* Perform penetration testing on networks, applications (including APIs, mobile apps, and web apps) * Utilize social engineering techniques * Provide mentoring to junior staff * Support Red Team ...
Senior Penetration Tester
Herndon, VA · On-site
$120 - $150/hr
* Perform penetration testing on networks, applications (including APIs, mobile apps, and web apps) * Utilize social engineering techniques * Provide mentoring to junior staff * Support Red Team ...
Mobile Penetration Tester information
See salary details
$22.5K - $35.8K
0% of jobs
$35.8K - $49K
0% of jobs
$49K - $62.3K
2% of jobs
$62.3K - $75.6K
3% of jobs
$75.6K - $88.9K
1% of jobs
$101.1K is the 25th percentile. Wages below this are outliers.
$88.9K - $102.1K
20% of jobs
$102.1K - $115.4K
14% of jobs
The median wage is $120.4K / yr.
$115.4K - $128.7K
26% of jobs
$138.1K is the 75th percentile. Wages above this are outliers.
$128.7K - $142K
13% of jobs
$142K - $155.2K
13% of jobs
$155.2K - $168.5K
9% of jobs
$22.5K
$119.9K
$168.5K
How much do mobile penetration tester jobs pay per year?
What is a mobile penetration tester?
A Mobile Penetration Tester evaluates the security of mobile applications, devices, and networks by simulating real-world attacks. They identify vulnerabilities, exploit weaknesses, and provide recommendations to strengthen security. This role requires knowledge of mobile operating systems (iOS, Android), reverse engineering, network security, and threat modeling. Testers use various tools and techniques to assess app security, including static and dynamic analysis. Their goal is to help organizations protect sensitive data and improve overall mobile security.
What skills and qualifications are needed to be a mobile penetration tester?
A Mobile Penetration Tester needs strong knowledge of mobile operating systems (Android and iOS), secure coding practices, and vulnerability assessment, typically supported by a background in cybersecurity or computer science. Familiarity with tools like Burp Suite, Frida, OWASP Mobile Security Testing Guide (MSTG), and certifications such as OSCP or GMOB are highly valued. Excellent analytical thinking, communication, and report-writing skills help testers clearly convey findings to both technical and non-technical stakeholders. These abilities are essential to identify and mitigate mobile security risks, ensuring robust defense measures for organizations.
What are common challenges faced by mobile penetration testers in their day-to-day work?
Mobile Penetration Testers often encounter the challenge of keeping up with rapidly evolving mobile platforms, frequent security patch releases, and diverse device configurations. Testing applications in various environments, dealing with obfuscated code, and adhering to strict project timelines can also add complexity. Collaboration with developers and IT teams is frequently required to ensure that security recommendations are implemented effectively. Adapting to new tools and methodologies is part of the role, making continuous learning a key aspect of success in this field.
What cities are hiring for Mobile Penetration Tester jobs?
Cities with the most Mobile Penetration Tester job openings:
What are the most commonly searched types of Penetration Tester jobs?
The most popular types of Penetration Tester jobs are:
What states have the most Mobile Penetration Tester jobs?
States with the most job openings for Mobile Penetration Tester jobs include:
What job categories do people searching Mobile Penetration Tester jobs look for?
The top searched job categories for Mobile Penetration Tester jobs are:
- Overnight International Penetration Tester
- Entry Level Cybersecurity Penetration Tester
- Penetration Testing Engineer
- Senior International Penetration Tester
- Penetration Testers
- Home Based Penetration Tester Red Team
- Remote Htb Cpts
- Temporary Cybersecurity Penetration Tester
- Cybersecurity Penetration Tester
- Giac Exploit Researcher And Advanced Penetration Tester

Job description
BreachLock is a global leader in Offensive Security including Red Teaming, Continuous Attack Surface Discovery and Penetration Testing services. We help organizations discover, prioritize, and mitigate exposures with evidence-backed Attack Surface Management, Penetration Testing, and Red Teaming. BreachLock provides an attacker's perspective that goes beyond standard vulnerabilities, enabling organizations to build a comprehensive, proactive defense strategy.
Role Description
Penetration Tester (Mid-Senior) Full-Time Remote (US)
As a penetration tester on BreachLock's US Strategic delivery team, you'll execute manual, methodology-driven engagements across web applications, APIs, and internal networks - including assumed breach simulations - for enterprise clients. You'll work directly with delivery leadership, contribute to internal tooling and quality systems, and help raise the bar for the team around you.
Key Responsibilities
- Execute web application, API and mobile penetration tests with a focus on manual testing beyond automated scanning - business logic, authentication abuse, authorization flaws, and injection chains
- Conduct internal network assessments, external network assessments and assumed breach engagements, including Active Directory enumeration, lateral movement, privilege escalation, and post-exploitation
- Leverage frameworks including MITRE ATT&CK, PTES, and OWASP to structure assessments and findings
- Develop and contribute to internal tooling - automation scripts, reporting utilities, and workflow improvements using Python, Bash, or similar
- Participate in QA review cycles, providing structured feedback on findings, CVSS scoring accuracy, and report quality
- Mentor junior testers through technical guidance and finding review
- Collaborate with delivery leadership on scoping, client kickoff calls, and remediation guidance
Requirements
- 3-5 years of professional penetration testing experience in a delivery or consulting context
- Strong web application and API testing fundamentals - Burp Suite proficiency, OWASP Top 10 and beyond, authentication and session management testing
- Solid internal network assessment skills - AD enumeration, Kerberoasting, NTLM relay, ADCS misconfigurations, assumed breach methodology
- Proficiency in scripting and automation (Python, PowerShell, Bash)
- Strong written communication - capable of writing clear, accurate, well-scoped findings independently
- Familiarity with PTaaS delivery models or platform-based reporting workflows is a plus
- US-based and eligible to work without sponsorship
Preferred
- Experience with C2 frameworks (Cobalt Strike, Havoc, Sliver, or similar)
- Active involvement in cybersecurity communities, research, or bug bounty programs
- Certifications such as OSCP, BSCP, CRTO, GWAPT, GPEN, or equivalent practical credentials
- Experience with SIEM platforms or EDR tools from an adversarial perspective
Benefits
- Competitive compensation and performance-based equity opportunities
- Flexible work hours with hybrid remote options
- Opportunity to work with international cybersecurity experts
- Strong career progression in a rapidly expanding early-stage company
- Exposure to cutting-edge research, tools, and techniques in offensive security
Additional Organization Details
- BreachLock Website
- Leadership Team
- Meet the BreachLockers Video Series
- Reuters Coverage
- CEO Interview - Cybercrime Magazine
- Seemant Sehgal Interview on RT4 & RTLZ
About BreachLock
Sourced by ZipRecruiter
Industry
Network security
Company size
51 - 200 Employees
Headquarters location
New York, NY, US
Year founded
2018