1

Penetration Test Jobs in Florida (NOW HIRING)

Senior Engineer, Offensive Security

Tampa, FL · On-site

$108K - $148K/yr

Run penetration tests. Network, web-application, cloud, and infrastructure testing, recon through exploitation, privilege escalation, and lateral movement, accelerated by the tooling you build, with ...

Senior Engineer, Offensive Security

Miami, FL · On-site

$109K - $150K/yr

Run penetration tests. Network, web-application, cloud, and infrastructure testing, recon through exploitation, privilege escalation, and lateral movement, accelerated by the tooling you build, with ...

Senior Engineer, Offensive Security

Tampa, FL · On-site

$108K - $148K/yr

Run penetration tests. Network, web-application, cloud, and infrastructure testing, recon through exploitation, privilege escalation, and lateral movement, accelerated by the tooling you build, with ...

Senior Engineer, Offensive Security

Tampa, FL · On-site

$108K - $148K/yr

Run penetration tests. Network, web-application, cloud, and infrastructure testing, recon through exploitation, privilege escalation, and lateral movement, accelerated by the tooling you build, with ...

Senior Engineer, Offensive Security

Miami, FL · On-site

$109K - $150K/yr

Run penetration tests. Network, web-application, cloud, and infrastructure testing, recon through exploitation, privilege escalation, and lateral movement, accelerated by the tooling you build, with ...

Senior Engineer, Offensive Security

Miami, FL · On-site

$109K - $150K/yr

Run penetration tests. Network, web-application, cloud, and infrastructure testing, recon through exploitation, privilege escalation, and lateral movement, accelerated by the tooling you build, with ...

Driller

Tallahassee, FL · On-site

$19.50 - $26.50/hr

Operates Geoprobe equipment to collect soil samples and Cone Penetration Test (CPT) data * Locates boring positions using maps, plans, or GPS systems * Records all required drilling data accurately

Driller

Lynn Haven, FL · On-site

$21 - $28.75/hr

Operates Geoprobe equipment to collect soil samples and Cone Penetration Test (CPT) data * Locates boring positions using maps, plans, or GPS systems * Records all required drilling data accurately

Driller

Lynn Haven, FL · On-site

$21 - $28.75/hr

Operates Geoprobe equipment to collect soil samples and Cone Penetration Test (CPT) data * Locates boring positions using maps, plans, or GPS systems * Records all required drilling data accurately

Driller

Tallahassee, FL · On-site

$19.50 - $26.50/hr

Operates Geoprobe equipment to collect soil samples and Cone Penetration Test (CPT) data * Locates boring positions using maps, plans, or GPS systems * Records all required drilling data accurately

Conduct regular security assessments, vulnerability scans, and penetration tests. * Develop and enforce security policies, procedures, and best practices. * Respond to security incidents and ...

... penetration testing, and risk assessments. * Knowledge of DoD acquisition process. * Understanding of network security/engineering. * Certifications: CISSP, CASP. RESPONSIBILITIES * Manage test ...

... penetration testing, and risk assessments. * Knowledge of DoD acquisition process. * Understanding of network security/engineering. * Certifications: CISSP, CASP. RESPONSIBILITIES * Manage test ...

next page

Showing results 1-20

Penetration Test information

See Florida salary details

$16.8K

$89.6K

$125.9K

How much do penetration test jobs pay per year?

As of Aug 31, 2026, the average yearly pay for penetration test in Florida is $89,596.00, according to ZipRecruiter salary data. Most workers in this role earn between $71,700.00 and $105,400.00 per year, depending on experience, location, and employer.

What is a penetration tester?

A penetration tester, often called a 'pen tester' or ethical hacker, is a cybersecurity professional who simulates cyberattacks on computer systems, networks, or applications to identify vulnerabilities that malicious hackers could exploit. Their goal is to uncover weaknesses before real attackers can find and exploit them, helping organizations strengthen their security. Penetration testers use a variety of tools and techniques, document their findings, and often provide recommendations for mitigation. This role requires knowledge of security protocols, programming, and the latest hacking methods.

What are the key skills and qualifications needed to thrive as a penetration tester, and why are they important?

To thrive as a Penetration Tester, you need a solid understanding of network security, operating systems, and vulnerability assessment, often backed by a degree in computer science or cybersecurity and relevant certifications like OSCP or CEH. Familiarity with tools such as Metasploit, Burp Suite, and Nmap is typically required to identify and exploit system weaknesses. Strong analytical thinking, attention to detail, and effective communication skills help convey technical findings to both technical and non-technical stakeholders. These skills are crucial for identifying security risks, mitigating vulnerabilities, and ensuring the overall protection of organizational assets.

What are the typical challenges faced by penetration testers when working with clients?

Penetration testers often encounter challenges such as limited access to information, time constraints, and varying levels of security awareness among client staff. Navigating these obstacles requires strong communication skills to clarify the scope of work, as well as adaptability to different environments and technologies. Building trust with clients and providing actionable, clear reports are also essential, as they help ensure that identified vulnerabilities are understood and addressed effectively.

What is the difference between Penetration Test vs Vulnerability Analyst?

AspectPenetration TestVulnerability Analyst
CertificationsOSCP, CEH, GPENCVE, CISSP, GIAC
Work EnvironmentSimulated attacks on systems to identify security gapsScanning and analyzing vulnerabilities in networks and applications
Employer & Industry UsageCybersecurity firms, IT departments, consultingSecurity teams, risk management, compliance

While both roles focus on cybersecurity, Penetration Testers actively exploit vulnerabilities to assess security defenses, whereas Vulnerability Analysts identify and prioritize vulnerabilities without exploiting them. Both roles are essential for a comprehensive security strategy and often collaborate within security teams.

How much do penetration testers make?

Penetration testers typically earn between $70,000 and $130,000 annually, depending on experience, certifications, and location. Senior professionals with advanced skills and certifications like OSCP or CISSP can earn higher salaries, especially in high-demand markets or specialized environments.

Is a penetration test a good career?

A career as a penetration tester involves identifying security vulnerabilities in computer systems and networks, often requiring knowledge of cybersecurity tools, scripting, and certifications like OSCP or CEH. It is a growing field with high demand for skilled professionals and offers opportunities for continuous learning and advancement. However, it can involve irregular hours and high-pressure situations depending on the employer and project scope.

Is there a demand for penetration testing?

There is strong demand for penetration testers as organizations seek to identify and fix security vulnerabilities. The role requires skills in cybersecurity tools, scripting, and certifications like OSCP or CEH, and job growth is expected to continue due to increasing cyber threats.

What is the average pay for penetration testing?

The average salary for penetration testers typically ranges from $70,000 to $130,000 annually, depending on experience, certifications, and location. Entry-level roles may start around $60,000, while experienced professionals with advanced skills and certifications like OSCP or CISSP can earn over $150,000. Many penetration testers work in cybersecurity environments that require knowledge of tools like Kali Linux and scripting languages.

What are the most commonly searched types of Penetration Test jobs in Florida?

The most popular types of Penetration Test jobs in Florida are:

What cities in Florida are hiring for Penetration Test jobs?

Cities in Florida with the most Penetration Test job openings:

Infographic showing various Penetration Test job openings in Florida as of August 2026, with employment types broken down into 57% Full Time, 11% Part Time, 8% Temporary, 16% Contract, and 8% Nights. Highlights an 92% In-person, and 8% Hybrid job distribution, with an average salary of $89,596 per year, or $43.1 per hour.

Delivery Senior Consultant, Penetration Tester

Lake Mary, FL • On-site


Deloitte
Finance and Insurance • 10K+ employees

8.2

Company rating: 8.2 out of 10

Based on 93 frontline employees who took The Breakroom Quiz

45th of 152 rated financial services

Good employer

Recommended by students

Paid breaks


Full-time

Re-posted 12 days ago


Job description

Our Deloitte Cyber team understands the unique challenges and opportunities businesses face in cybersecurity. Join our team to deliver powerful solutions to help our clients navigate the ever-changing threat landscape. Through powerful solutions and managed services that simplify complexity, we enable our clients to operate with resilience, grow with confidence, and proactively manage to secure success.

We are seeking a skilled Penetration Tester to assess the security of web applications, APIs, and related systems. This role is responsible for identifying vulnerabilities, validating exploitability, and providing practical remediation guidance to improve overall application security posture. The ideal candidate combines hands-on offensive security experience with strong knowledge of secure development practices and common web application attack vectors.

Work you'll do

As a Penetration Tester on the Cyber Defense & Resilience team, you will be responsible for...

  • Perform manual and automated penetration testing of web applications, APIs, and supporting infrastructure.
  • Identify, validate, and document security vulnerabilities such as those in the OWASP Top 10.
  • Conduct authenticated and unauthenticated testing across development, test, and production-like environments.
  • Assess application security controls including authentication, authorization, session management, input validation, and encryption.
  • Prepare clear, risk-based reports with technical findings, business impact, proof of concept, and remediation recommendations.
  • Work with developers, architects, and security teams to explain findings and support remediation efforts.
  • Retest remediated issues and confirm closure.
  • Contribute to security standards, testing methodologies, and internal knowledge sharing.
  • Stay current on emerging threats, exploit techniques, and application security trends.

A successful candidate would possess these skills:

  • Ability to work independently and collaborate as part of a team
  • Effective written and verbal communication skills
  • Meticulous attention to detail and quality of work product
  • Ability to build and sustain professional relationships
  • Ability to lead projects or workstreams
  • Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment
  • Strong interpersonal skills and professional demeanor
  • Ability to meet deadlines
  • Ability to provide clear guidance to others

The Team

Deloitte's Government & Public Services (GPS) practice - our people, ideas, technology and outcomes - is designed for impact. Serving federal, state, & local government clients as well as public higher education institutions, our team of professionals brings fresh perspective to help clients anticipate disruption, reimagine the possible, and fulfill their mission promise.

Our Cyber Defense & Resilience offering assists clients in defending against advanced threats by transforming security operations, monitoring technology, data analytics, and threat intelligence. Helps manage and protect dynamic attack surfaces and provides rapid crisis and cyber incident response, ensuring clients can be ready for, respond to, and recover from business disruptions.

This opportunity sits within our Deloitte US Delivery Center model, which is dedicated to driving impactful business services. It leverages Deloitte's scale and talent, as well as a center delivery model to provide high-quality, cost-effective service with standardized processes and procedures to service businesses across Deloitte.

The Deloitte US Delivery Center has a small-business feel with a big-business impact. With the resources of Deloitte and a community feel, the delivery center model provides high-quality services to our clients. USDC professionals work out of one of our specific delivery center locations, and each location presents dynamic career opportunities for professionals to focus on their work with nominal travel requirements.

Qualifications

Required:

  • Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related technical field
  • Ability to obtain and maintain the necessary clearance for the role.
  • Offensive Security Certified Professional (OSCP), Offensive Security Web Expert (OSWE), GIAC Penetration Tester (GPEN), or Certified Ethical Hacker (CEH).
  • 2+ years of experience within the following:
    • Hands-on penetration testing experience with a focus on web applications.
    • Strong understanding of web technologies including HTTP/S, REST APIs, JavaScript, cookies, headers, and sessions.
    • Experience identifying vulnerabilities such as SQL injection, XSS, CSRF, SSRF, IDOR, authentication flaws, and access control weaknesses.
    • Proficiency with common testing tools such as Burp Suite, OWASP ZAP, Nmap, Postman, and similar tools.
    • Experience writing professional penetration test reports for technical and non-technical audiences.
    • Familiarity with OWASP Top 10, CWE, CVSS, and secure coding principles
  • Delivery Center Location & Travel Requirements:
    • Hybrid Work Model: Operate under a hybrid system requiring residence within a commutable distance to one of the US Delivery Center locations (Gilbert, Lake Mary, or Mechanicsburg) or Geo-Hub locations (Atlanta, Charlotte, Dallas, Houston, and Philadelphia)
    • Co-location Expectation: Spend up to 30% of working time co-located at an assigned office for orchestrated opportunities, including projects, practice sessions, training, and Moments That Matter at a Deloitte Delivery Center location, Geo-Hub location, approved site, or project location
    • Travel Requirement: Maximum of 10% overnight travel for client or project purposes
    • Relocation Requirement: If relocation is necessary, complete the move within 12 weeks from the start date to reside within a commutable distance
  • Must be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future.

    Preferred:

    • Experience testing modern frameworks and architectures such as single-page applications, microservices, and cloud-hosted applications.
    • Knowledge of CI/CD pipelines and DevSecOps practices.
    • Experience with source code review or secure code assessment.
    • Familiarity with cloud platforms such as AWS, Azure, or GCP.
    Qualifications:

    Our Deloitte Cyber team understands the unique challenges and opportunities businesses face in cybersecurity. Join our team to deliver powerful solutions to help our clients navigate the ever-changing threat landscape. Through powerful solutions and managed services that simplify complexity, we enable our clients to operate with resilience, grow with confidence, and proactively manage to secure success.

    We are seeking a skilled Penetration Tester to assess the security of web applications, APIs, and related systems. This role is responsible for identifying vulnerabilities, validating exploitability, and providing practical remediation guidance to improve overall application security posture. The ideal candidate combines hands-on offensive security experience with strong knowledge of secure development practices and common web application attack vectors.

    Work you'll do

    As a Penetration Tester on the Cyber Defense & Resilience team, you will be responsible for...

    • Perform manual and automated penetration testing of web applications, APIs, and supporting infrastructure.
    • Identify, validate, and document security vulnerabilities such as those in the OWASP Top 10.
    • Conduct authenticated and unauthenticated testing across development, test, and production-like environments.
    • Assess application security controls including authentication, authorization, session management, input validation, and encryption.
    • Prepare clear, risk-based reports with technical findings, business impact, proof of concept, and remediation recommendations.
    • Work with developers, architects, and security teams to explain findings and support remediation efforts.
    • Retest remediated issues and confirm closure.
    • Contribute to security standards, testing methodologies, and internal knowledge sharing.
    • Stay current on emerging threats, exploit techniques, and application security trends.

    A successful candidate would possess these skills:

    • Ability to work independently and collaborate as part of a team
    • Effective written and verbal communication skills
    • Meticulous attention to detail and quality of work product
    • Ability to build and sustain professional relationships
    • Ability to lead projects or workstreams
    • Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment
    • Strong interpersonal skills and professional demeanor
    • Ability to meet deadlines
    • Ability to provide clear guidance to others

    The Team

    Deloitte's Government & Public Services (GPS) practice - our people, ideas, technology and outcomes - is designed for impact. Serving federal, state, & local government clients as well as public higher education institutions, our team of professionals brings fresh perspective to help clients anticipate disruption, reimagine the possible, and fulfill their mission promise.

    Our Cyber Defense & Resilience offering assists clients in defending against advanced threats by transforming security operations, monitoring technology, data analytics, and threat intelligence. Helps manage and protect dynamic attack surfaces and provides rapid crisis and cyber incident response, ensuring clients can be ready for, respond to, and recover from business disruptions.

    This opportunity sits within our Deloitte US Delivery Center model, which is dedicated to driving impactful business services. It leverages Deloitte's scale and talent, as well as a center delivery model to provide high-quality, cost-effective service with standardized processes and procedures to service businesses across Deloitte.

    The Deloitte US Delivery Center has a small-business feel with a big-business impact. With the resources of Deloitte and a community feel, the delivery center model provides high-quality services to our clients. USDC professionals work out of one of our specific delivery center locations, and each location presents dynamic career opportunities for professionals to focus on their work with nominal travel requirements.

    Qualifications

    Required:

    • Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related technical field
    • Ability to obtain and maintain the necessary clearance for the role.
    • Offensive Security Certified Professional (OSCP), Offensive Security Web Expert (OSWE), GIAC Penetration Tester (GPEN), or Certified Ethical Hacker (CEH).
    • 2+ years of experience within the following:
      • Hands-on penetration testing experience with a focus on web applications.
      • Strong understanding of web technologies including HTTP/S, REST APIs, JavaScript, cookies, headers, and sessions.
      • Experience identifying vulnerabilities such as SQL injection, XSS, CSRF, SSRF, IDOR, authentication flaws, and access control weaknesses.
      • Proficiency with common testing tools such as Burp Suite, OWASP ZAP, Nmap, Postman, and similar tools.
      • Experience writing professional penetration test reports for technical and non-technical audiences.
      • Familiarity with OWASP Top 10, CWE, CVSS, and secure coding principles
    • Delivery Center Location & Travel Requirements:
      • Hybrid Work Model: Operate under a hybrid system requiring residence within a commutable distance to one of the US Delivery Center locations (Gilbert, Lake Mary, or Mechanicsburg) or Geo-Hub locations (Atlanta, Charlotte, Dallas, Houston, and Philadelphia)
      • Co-location Expectation: Spend up to 30% of working time co-located at an assigned office for orchestrated opportunities, including projects, practice sessions, training, and Moments That Matter at a Deloitte Delivery Center location, Geo-Hub location, approved site, or project location
      • Travel Requirement: Maximum of 10% overnight travel for client or project purposes
      • Relocation Requirement: If relocation is necessary, complete the move within 12 weeks from the start date to reside within a commutable distance
    • Must be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future.

      Preferred:

      • Experience testing modern frameworks and architectures such as single-page applications, microservices, and cloud-hosted applications.
      • Knowledge of CI/CD pipelines and DevSecOps practices.
      • Experience with source code review or secure code assessment.
      • Familiarity with cloud platforms such as AWS, Azure, or GCP.
      Education:Bachelor's DegreeEmployment Type:


      What Deloitte employees say

      Pay

      Benefits

      Hours and flexibility

      Workplace

      Get the full story on Breakroom