ZipRecruiter

Log In

1

Pen Testing Jobs (NOW HIRING)

SmartIPlace

DevSecOps Engineer[onsite]

Miami, FL · On-site

Demonstrated experience doing static code analysis (SAST) and dynamic testing (DAST) and/or pen-testing applications. * Experience with Salesforce and/or Oracle applications/platforms and security ...

BizTek People

Penetration Tester

Hillsboro, OR · On-site

Certifications such as GIAC Web Application Penetration Testing (GWAPT) or Offensive Security Certified Professional (OSCP) are strongly preferred. Skill Set Pen tester

next page

Showing results 1-20

People also search for

All JobsPen Testing Jobs

Pen Testing information

See salary details

$9

$19

$31

How much do pen testing jobs pay per hour?

As of Jun 2, 2026, the average hourly pay for pen testing in the United States is $19.14, according to ZipRecruiter salary data. Most workers in this role earn between $15.38 and $19.23 per hour, depending on experience, location, and employer.

What are the key skills and qualifications needed to thrive as a Penetration Tester, and why are they important?

To thrive as a Penetration Tester, you need a solid understanding of network security, vulnerability assessment, and ethical hacking, often backed by a degree in computer science or cybersecurity and industry certifications like CEH or OSCP. Familiarity with tools such as Metasploit, Burp Suite, and Nmap, as well as various operating systems, is typically required. Strong analytical thinking, problem-solving skills, and effective communication set top performers apart when explaining findings to technical and non-technical stakeholders. These skills ensure that vulnerabilities are thoroughly identified and addressed, helping organizations protect critical data and systems.

What are some common challenges faced by penetration testers when working on client projects?

Penetration testers often encounter challenges such as limited timeframes to conduct thorough assessments, incomplete or outdated documentation from clients, and the need to clearly communicate technical findings to non-technical stakeholders. They may also face restrictions on testing certain systems due to business constraints or potential operational impact. Building trust with clients and ensuring testing activities do not disrupt critical services are also important aspects of the role.

What is pen testing?

Pen testing, short for penetration testing, is a cybersecurity practice where professionals simulate attacks on a computer system, network, or application to identify vulnerabilities that malicious hackers could exploit. The goal is to proactively find and fix security weaknesses before they can be used in real-world attacks. Pen testers use a variety of tools and techniques to mimic the methods of cybercriminals, and then provide detailed reports with recommendations for improving security. Organizations often conduct pen tests regularly as part of their overall security strategy.

What is the difference between Pen Testing vs Vulnerability Assessment?

AspectPen TestingVulnerability Assessment
PurposeSimulates attacks to identify exploitable vulnerabilitiesIdentifies and prioritizes security weaknesses
DepthIn-depth, targeted testingBroad, overview of vulnerabilities
CertificationsOSCP, CEH, GPENCISA, CISSP, CEH
Work EnvironmentHands-on, technical testingAnalysis and reporting

Pen Testing involves actively exploiting vulnerabilities to assess security defenses, while Vulnerability Assessment focuses on identifying and prioritizing potential weaknesses without exploiting them. Both are essential for a comprehensive security strategy but serve different roles in cybersecurity testing.

More about Pen Testing jobs
What cities are hiring for Pen Testing jobs? Cities with the most Pen Testing job openings:
What states have the most Pen Testing jobs? States with the most job openings for Pen Testing jobs include:
What job categories do people searching Pen Testing jobs look for? The top searched job categories for Pen Testing jobs are:
Pen Testing jobs near you
URGENT NEED - WAF Engineer - Fort Worth, Texas _ ONISTE

URGENT NEED - WAF Engineer - Fort Worth, Texas _ ONISTE

Navtech, Inc.

Fort Worth, TX • On-site

Contractor

Posted 11 days ago

Job description

I have an opportunity for "WAF Engineer - Fort Worth, Texas _ ONISTE" and I am looking for a candidate who can join Immediately if you are interested, reply to me with your updated resume or if you could refer someone I would really appreciate it.
Position : WAF Engineer
Location : Fort Worth, Texas (Onsite)
Duration : 6 to 12 Months Contract
General Job Description:
The Web Application Security team collaborates with application owners, architects, and developers to integrate security tools such as web application firewalls and bot mitigation to protect American Airlines websites and mobile apps.
This team also collaborates with corporate security fraud teams, privacy teams, and incident response teams in investigations related to websites. This individual is responsible for the analysis, design, implementation, and maintenance of the automation tasks for our product.
This individual is also responsible for collaborating with application owners and security vendors to update/tune Web Application Firewall (WAF) and bot mitigation security policies.
Minimum Qualifications:
Bachelor's degree in computer science, Computer Engineering, Technology, Information Systems (CIS/MIS), Engineering or related technical discipline, or equivalent experience/training
3 years of technology experience, with a focus on information security technology development and administration, web app development, or web application pen testing
Preferred Qualifications:
Master's degree in computer science, Computer Engineering, Technology, Information Systems (CIS/MIS), Engineering or related technical discipline, or equivalent experience/training
5+ years of technology experience, with a focus on information security technology development and administration, web app development, or web application pen testing.
CISSP, CISM, CISA, GIAC or other security certifications are desired.
Strong technical background with Akamai Web Application Firewall (WAF) and bot mitigation security policies
Experience working with Akamai performance and security tools.
Skills, Licenses & Certifications:
Solid comprehension of HTTP protocol and demonstrated ability to troubleshoot using HTTP logs and Splunk or other analytics tools
Strong technical background in web development and familiarity with potential attack vectors/methods
Strong technical background in scripting languages (Python, PowerShell, or JavaScript)
Basic understanding of DNS, Networks, Firewalls, SSL Certificates
Working understanding of Agile Framework
Self-motivated learning, good attitude
Language & Communication Skills:
Ability to effectively communicate both verbally and written with all levels within the organization.
Ability to explain technical concepts and adjust messaging based on the audience, including non-technical groups.
Ability to influence through outstanding interpersonal skills, collaboration, and negotiation skills.
Ability to work well within a team environment, as well as independently.
Regards
Alex . K
NAVTECH INC
1600 Golf Road. Suite 1200, Rolling Meadows, IL 60008
Ph: (224) 348-1340 || Email: alex@navtechusa.com || www.navtechusa.com E-Verified Company
Navtech logo

About Navtech

Sourced by ZipRecruiter

Industry

Civil engineering construction

Company size

11 - 50 Employees

Headquarters location

New Bloomfield, PA, US

Year founded

1996

View All Navtech Jobs

Apply