Pen Testing Associate
Orlando, FL · On-site
We are seeking a Penetration Testing Associate. Under general direction, this role acts as an ethical hacker who tests the security of clients' computer systems, networks, and applications. They ...
Pen Testing Associate
Orlando, FL · On-site
We are seeking a Penetration Testing Associate. Under general direction, this role acts as an ethical hacker who tests the security of clients' computer systems, networks, and applications. They ...
Pen Testing Associate
Tampa, FL · On-site
We are seeking a Penetration Testing Associate. Under general direction, this role acts as an ethical hacker who tests the security of clients' computer systems, networks, and applications. They ...
Pen Testing Associate
Tampa, FL · On-site
We are seeking a Penetration Testing Associate. Under general direction, this role acts as an ethical hacker who tests the security of clients' computer systems, networks, and applications. They ...
In this role, the Senior Lead Application Pen Testing Cyber Security Research Engineer will: * Lead the development of application penetration testing methods and solutions across a broad range of ...
In this role, the Senior Lead Application Pen Testing Cyber Security Research Engineer will: * Lead the development of application penetration testing methods and solutions across a broad range of ...
In this role, the Senior Lead Application Pen Testing Cyber Security Research Engineer will: * Lead the development of application penetration testing methods and solutions across a broad range of ...
In this role, the Senior Lead Application Pen Testing Cyber Security Research Engineer will: * Lead the development of application penetration testing methods and solutions across a broad range of ...
In this role, the Senior Lead Application Pen Testing Cyber Security Research Engineer will: * Lead the development of application penetration testing methods and solutions across a broad range of ...
In this role, the Senior Lead Application Pen Testing Cyber Security Research Engineer will: * Lead the development of application penetration testing methods and solutions across a broad range of ...
In this role, the Senior Lead Application Pen Testing Cyber Security Research Engineer will: * Lead the development of application penetration testing methods and solutions across a broad range of ...
In this role, the Senior Lead Application Pen Testing Cyber Security Research Engineer will: * Lead the development of application penetration testing methods and solutions across a broad range of ...
Security Consultant / Pen Testing Location: Atlanta, Ga. Duration; 6-12 months w RTH ($110k) Start: ASAP Need GC and USC Security Engineer II will have broad areas of responsibility including network ...
Security Consultant / Pen Testing Location: Atlanta, Ga. Duration; 6-12 months w RTH ($110k) Start: ASAP Need GC and USC Security Engineer II will have broad areas of responsibility including network ...
The candidate should be familiar with the app pen testing process. This role will manage pen tests, work with external testers and internal application development teams to schedule, conduct, review ...
Quick apply
The candidate should be familiar with the app pen testing process. This role will manage pen tests, work with external testers and internal application development teams to schedule, conduct, review ...
Penetration Tester
Dallas, TX · On-site
Heavy Penetration Testing Experience Needed -Manual AND automated testing -Manual pen testing experience Need to be able to actually execute and understand tools/how to use. -If they have an ethical ...
Penetration Tester
Dallas, TX · On-site
Heavy Penetration Testing Experience Needed -Manual AND automated testing -Manual pen testing experience Need to be able to actually execute and understand tools/how to use. -If they have an ethical ...
Application security Pen tester
Fort Mill, SC · On-site
$51.75 - $69/hr
Application security Pen tester Location: FORT MILL, SC Duration: 6 months Competencies: 4-6+ years ... Skilled in security testing (SAST, DAST, SCA, OWASP Top 10). Ability to verify vulnerabilities and ...
Application security Pen tester
Fort Mill, SC · On-site
$51.75 - $69/hr
Application security Pen tester Location: FORT MILL, SC Duration: 6 months Competencies: 4-6+ years ... Skilled in security testing (SAST, DAST, SCA, OWASP Top 10). Ability to verify vulnerabilities and ...
Responsibilities Conduct black box ,white box security and penetration testing to assess and validate application security Perform manual pen-tests, ability to setup threat models and fuzzers. Be ...
Responsibilities Conduct black box ,white box security and penetration testing to assess and validate application security Perform manual pen-tests, ability to setup threat models and fuzzers. Be ...
Preferred At least 2 years of experience in Security Testing (Web & Network Pen testing and Secure code analysis).. Hands on security tester with proficiency in tools like HP Fortify, Web Inspect ...
Preferred At least 2 years of experience in Security Testing (Web & Network Pen testing and Secure code analysis).. Hands on security tester with proficiency in tools like HP Fortify, Web Inspect ...
Preferred At least 2 years of experience in Security Testing (Web & Network Pen testing and Secure code analysis) Hands on security tester with proficiency in tools like HP Fortify, Web Inspect ...
Preferred At least 2 years of experience in Security Testing (Web & Network Pen testing and Secure code analysis) Hands on security tester with proficiency in tools like HP Fortify, Web Inspect ...
Penetration Tester
Chantilly, VA · On-site
$150K - $195K/yr
Pen Testers are also responsible for performing security focused services to improve the security posture of NRO ISs. Travel: 25% estimate for pen testers (OCONUS travel 2x per year). What will you ...
Penetration Tester
Chantilly, VA · On-site
$150K - $195K/yr
Pen Testers are also responsible for performing security focused services to improve the security posture of NRO ISs. Travel: 25% estimate for pen testers (OCONUS travel 2x per year). What will you ...
Penetration Tester
Aurora, CO · On-site
$150K - $195K/yr
Pen Testers are also responsible for performing security focused services to improve the security posture of NRO ISs. Travel: 25% estimate for pen testers (OCONUS travel 2x per year). What will you ...
Penetration Tester
Aurora, CO · On-site
$150K - $195K/yr
Pen Testers are also responsible for performing security focused services to improve the security posture of NRO ISs. Travel: 25% estimate for pen testers (OCONUS travel 2x per year). What will you ...
Penetration Tester
Chantilly, VA · On-site
$90 - $130/hr
... testing approved by the Government and write a report with all applicable findings. The report shall follow a template that shall be created, maintained, and updated by the Pen Tester with Government ...
Penetration Tester
Chantilly, VA · On-site
$90 - $130/hr
... testing approved by the Government and write a report with all applicable findings. The report shall follow a template that shall be created, maintained, and updated by the Pen Tester with Government ...
Penetration Tester
Chantilly, VA · On-site
... testing approved by the Government and write a report with all applicable findings. The report shall follow a template that shall be created, maintained, and updated by the Pen Tester with Government ...
Quick apply
Penetration Tester
Chantilly, VA · On-site
... testing approved by the Government and write a report with all applicable findings. The report shall follow a template that shall be created, maintained, and updated by the Pen Tester with Government ...
Penetration Tester
$150K - $195K/yr
Pen Testers are also responsible for performing security focused services to improve the security posture of NRO ISs. Travel: 25% estimate for pen testers (OCONUS travel 2x per year). What will you ...
Penetration Tester
$150K - $195K/yr
Pen Testers are also responsible for performing security focused services to improve the security posture of NRO ISs. Travel: 25% estimate for pen testers (OCONUS travel 2x per year). What will you ...
Product Security Engineer - Red Team/Pen Testing
Palo Alto, CA · On-site
$140 - $170/hr
Product Security Engineer - Red Team/Pen Testing Cyberattacks on critical infrastructure, government, and private enterprises are at an all time high - and only growing more urgent by the day. Xage ...
Product Security Engineer - Red Team/Pen Testing
Palo Alto, CA · On-site
$140 - $170/hr
Product Security Engineer - Red Team/Pen Testing Cyberattacks on critical infrastructure, government, and private enterprises are at an all time high - and only growing more urgent by the day. Xage ...
Penetration Tester
Chantilly, VA · On-site
... testing approved by the Government and write a report with all applicable findings. The report shall follow a template that shall be created, maintained, and updated by the Pen Tester with Government ...
Penetration Tester
Chantilly, VA · On-site
... testing approved by the Government and write a report with all applicable findings. The report shall follow a template that shall be created, maintained, and updated by the Pen Tester with Government ...
Pen Testing information
See salary details
$9.62 - $11.58
1% of jobs
$11.58 - $13.55
0% of jobs
$13.55 - $15.52
24% of jobs
$15.53 is the 25th percentile. Wages below this are outliers.
$15.52 - $17.48
47% of jobs
$18.08 is the 75th percentile. Wages above this are outliers.
$17.48 - $19.45
9% of jobs
$19.45 - $21.42
8% of jobs
$21.42 - $23.38
8% of jobs
$23.38 - $25.35
2% of jobs
$25.35 - $27.32
0% of jobs
$27.32 - $29.28
0% of jobs
$29.28 - $31.25
0% of jobs
$9
$19
$31
How much do pen testing jobs pay per hour?
As of Aug 22, 2026, the average hourly pay for pen testing in the United States is $19.14, according to ZipRecruiter salary data. Most workers in this role earn between $15.38 and $19.23 per hour, depending on experience, location, and employer.
What is pen testing?
Pen testing, short for penetration testing, is a cybersecurity practice where professionals simulate attacks on a computer system, network, or application to identify vulnerabilities that malicious hackers could exploit. The goal is to proactively find and fix security weaknesses before they can be used in real-world attacks. Pen testers use a variety of tools and techniques to mimic the methods of cybercriminals, and then provide detailed reports with recommendations for improving security. Organizations often conduct pen tests regularly as part of their overall security strategy.
What are the key skills and qualifications needed to thrive as a penetration tester, and why are they important?
To thrive as a Penetration Tester, you need a solid understanding of network security, vulnerability assessment, and ethical hacking, often backed by a degree in computer science or cybersecurity and industry certifications like CEH or OSCP. Familiarity with tools such as Metasploit, Burp Suite, and Nmap, as well as various operating systems, is typically required. Strong analytical thinking, problem-solving skills, and effective communication set top performers apart when explaining findings to technical and non-technical stakeholders. These skills ensure that vulnerabilities are thoroughly identified and addressed, helping organizations protect critical data and systems.
What are some common challenges faced by penetration testers when working on client projects?
Penetration testers often encounter challenges such as limited timeframes to conduct thorough assessments, incomplete or outdated documentation from clients, and the need to clearly communicate technical findings to non-technical stakeholders. They may also face restrictions on testing certain systems due to business constraints or potential operational impact. Building trust with clients and ensuring testing activities do not disrupt critical services are also important aspects of the role.
What is the difference between Pen Testing vs Vulnerability Assessment?
| Aspect | Pen Testing | Vulnerability Assessment |
|---|---|---|
| Purpose | Simulates attacks to identify exploitable vulnerabilities | Identifies and prioritizes security weaknesses |
| Depth | In-depth, targeted testing | Broad, overview of vulnerabilities |
| Certifications | OSCP, CEH, GPEN | CISA, CISSP, CEH |
| Work Environment | Hands-on, technical testing | Analysis and reporting |
Pen Testing involves actively exploiting vulnerabilities to assess security defenses, while Vulnerability Assessment focuses on identifying and prioritizing potential weaknesses without exploiting them. Both are essential for a comprehensive security strategy but serve different roles in cybersecurity testing.
How do you become a pen tester?
To become a penetration tester, you typically need a strong foundation in computer networks, operating systems, and security principles, often gained through a degree in cybersecurity, computer science, or related fields. Gaining hands-on experience with tools like Kali Linux, Metasploit, and Wireshark, along with industry certifications such as the Offensive Security Certified Professional (OSCP), can improve job prospects. Continuous learning and staying updated on emerging vulnerabilities are essential in this field.
How hard is it to get into pen testing?
Pen testing is a specialized cybersecurity role that typically requires a strong understanding of networks, operating systems, and security principles, often gained through certifications like OSCP or CEH and hands-on experience. Entry can be competitive, but building skills with practical labs, scripting, and knowledge of tools like Kali Linux can improve chances of breaking into the field.
Is pen testing a good career?
Penetration testing, or pen testing, is a cybersecurity role focused on identifying vulnerabilities in systems and networks. It requires technical skills, knowledge of security tools, and often certifications like OSCP or CEH. The field offers high demand, competitive salaries, and opportunities for continuous learning, making it a strong career choice for those interested in cybersecurity.
More about Pen Testing jobs
What cities are hiring for Pen Testing jobs?
Cities with the most Pen Testing job openings:
What states have the most Pen Testing jobs?
States with the most job openings for Pen Testing jobs include:
What job categories do people searching Pen Testing jobs look for?
The top searched job categories for Pen Testing jobs are:
Full-time
Medical, Dental, Vision, Retirement
Posted 28 days ago
CliftonLarsonAllen rating
7.0
Based on 29 frontline employees who took The Breakroom Quiz
21st of 23 rated bookkeepers and accountants
Job description
CLA is a top 10 national professional services firm where our purpose is to create opportunities every day, for our clients, our people, and our communities through industry-focused wealth advisory, digital, audit, tax, consulting, and outsourcing services. Even with more than 8,500 people, 130 U.S. locations, and a global reach, we promise to know you and help you.
We are seeking a Penetration Testing Associate. Under general direction, this role acts as an ethical hacker who tests the security of clients' computer systems, networks, and applications. They support efforts to simulate attacks that may identify vulnerabilities and weaknesses in clients' systems that could be exploited by malicious hackers. Assist in making recommendations on how to improve client's systems security.
Essential Job Functions
Assists with the evaluation, testing, and scanning of client networks to help determine weaknesses in client IT operations, processes, systems, and related controls.
Support efforts to identify unique issues specific to the client's environment and assist in presenting solutions to the engagement teams based on findings.
Perform penetration testing such as EPT, phishing & calls, and wireless.
Assist with internal and external technical security assessments.
Aid in review of tactics and processes to protect organizations from threats.
Assists in the interpretation of findings to determine if systems and processes can appropriately react to threats.
Support efforts to identify security settings that may need to be enhanced.
Participate in tabletop tests to help clients prepare for disaster events.
Provide direction, train, and delegate work to interns as needed.
Assist Seniors, Managers, and Directors with client relationships, practice management, and business development activities.
Requirements
Experience
None required.
1 year of relevant experience preferred.
Education
Bachelor's degree is required. (Combination of relevant experience, education, and training may be accepted in lieu of degree.)
Degree in Computer Science, Information Technology or related field preferred.
Certifications / Licenses
None required.
The following certifications are preferred:
- OSCP
- OSWP
- CEH
- PNPT
- Sec+
- Net+
Technical Competencies
- Knowledge of penetration testing frameworks such as OSSTMM, OWASP, and PTES required
- Ability to perform testing such as EPT, phishing & calls, and/or wireless.
- Proficiency in Microsoft Outlook and Office products (Word, Excel, PowerPoint, etc) required
Travel Requirements
This position requires frequent local travel to/from client sites and may require occasional non-local or overnight travel for client visits, training, meetings and/or other business-related purposes.
#LI-RC1
Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities
Click here to learn about your hiring rights.
Wellness at CLA
To support our CLA family members, we focus on their physical, financial, social, and emotional well-being and offer comprehensive benefit options that include health, dental, vision, 401k and much more.
To view a complete list of benefits, click here.
What CliftonLarsonAllen employees say
Pay
Benefits
Hours and flexibility
Workplace
Get the full story on Breakroom
About CliftonLarsonAllen
Sourced by ZipRecruiter
CliftonLarsonAllen (CLA) is a leading professional services company based in Minneapolis, MN, US. CLA operates in the accounting industry and offers a broad range of products and services such as wealth advisory, outsourcing, audit, tax, and consulting services. The company was founded in 1953 with a merger between two firms, Clifton Gunderson and LarsonAllen, in 2012. Working in accordance with their mission to create opportunities for clients, people, and communities, they have established a presence across the US, serving privately held businesses, non-profits, and governmental entities. Recognized for their contributions, CLA has received accolades such as the Innovative Firm of the Year award.
Industry
Accounting services
Company size
5,001 - 10,000 Employees
Headquarters location
Minneapolis, MN, US
Year founded
2012