Experience writing professional penetration test reports for technical and non-technical audiences. * Familiarity with OWASP Top 10, CWE, CVSS, and secure coding principles * Delivery Center Location ...
Experience writing professional penetration test reports for technical and non-technical audiences. * Familiarity with OWASP Top 10, CWE, CVSS, and secure coding principles * Delivery Center Location ...
Senior Engineer, Offensive Security
Tampa, FL · On-site
$108K - $148K/yr
Run penetration tests. Network, web-application, cloud, and infrastructure testing, recon through exploitation, privilege escalation, and lateral movement, accelerated by the tooling you build, with ...
Senior Engineer, Offensive Security
Tampa, FL · On-site
$108K - $148K/yr
Run penetration tests. Network, web-application, cloud, and infrastructure testing, recon through exploitation, privilege escalation, and lateral movement, accelerated by the tooling you build, with ...
Senior Engineer, Offensive Security
Miami, FL · On-site
$109K - $150K/yr
Run penetration tests. Network, web-application, cloud, and infrastructure testing, recon through exploitation, privilege escalation, and lateral movement, accelerated by the tooling you build, with ...
Senior Engineer, Offensive Security
Miami, FL · On-site
$109K - $150K/yr
Run penetration tests. Network, web-application, cloud, and infrastructure testing, recon through exploitation, privilege escalation, and lateral movement, accelerated by the tooling you build, with ...
Senior Engineer, Offensive Security
Tampa, FL · On-site
$108K - $148K/yr
Run penetration tests. Network, web-application, cloud, and infrastructure testing, recon through exploitation, privilege escalation, and lateral movement, accelerated by the tooling you build, with ...
Senior Engineer, Offensive Security
Tampa, FL · On-site
$108K - $148K/yr
Run penetration tests. Network, web-application, cloud, and infrastructure testing, recon through exploitation, privilege escalation, and lateral movement, accelerated by the tooling you build, with ...
Senior Engineer, Offensive Security
Tampa, FL · On-site
$108K - $148K/yr
Run penetration tests. Network, web-application, cloud, and infrastructure testing, recon through exploitation, privilege escalation, and lateral movement, accelerated by the tooling you build, with ...
Senior Engineer, Offensive Security
Tampa, FL · On-site
$108K - $148K/yr
Run penetration tests. Network, web-application, cloud, and infrastructure testing, recon through exploitation, privilege escalation, and lateral movement, accelerated by the tooling you build, with ...
Senior Engineer, Offensive Security
Miami, FL · On-site
$109K - $150K/yr
Run penetration tests. Network, web-application, cloud, and infrastructure testing, recon through exploitation, privilege escalation, and lateral movement, accelerated by the tooling you build, with ...
Senior Engineer, Offensive Security
Miami, FL · On-site
$109K - $150K/yr
Run penetration tests. Network, web-application, cloud, and infrastructure testing, recon through exploitation, privilege escalation, and lateral movement, accelerated by the tooling you build, with ...
Senior Engineer, Offensive Security
Miami, FL · On-site
$109K - $150K/yr
Run penetration tests. Network, web-application, cloud, and infrastructure testing, recon through exploitation, privilege escalation, and lateral movement, accelerated by the tooling you build, with ...
Senior Engineer, Offensive Security
Miami, FL · On-site
$109K - $150K/yr
Run penetration tests. Network, web-application, cloud, and infrastructure testing, recon through exploitation, privilege escalation, and lateral movement, accelerated by the tooling you build, with ...
Minimum five years of recent experience working with using application penetration tools to perform security tests such as AppScan, Netsparker, Acunetix, ZAP, Veracode, BurpSuite or equivalent ...
Minimum five years of recent experience working with using application penetration tools to perform security tests such as AppScan, Netsparker, Acunetix, ZAP, Veracode, BurpSuite or equivalent ...
Driller
Tallahassee, FL · On-site
$19.50 - $26.50/hr
Operates Geoprobe equipment to collect soil samples and Cone Penetration Test (CPT) data * Locates boring positions using maps, plans, or GPS systems * Records all required drilling data accurately
Driller
Tallahassee, FL · On-site
$19.50 - $26.50/hr
Operates Geoprobe equipment to collect soil samples and Cone Penetration Test (CPT) data * Locates boring positions using maps, plans, or GPS systems * Records all required drilling data accurately
Driller
Lynn Haven, FL · On-site
$21 - $28.75/hr
Operates Geoprobe equipment to collect soil samples and Cone Penetration Test (CPT) data * Locates boring positions using maps, plans, or GPS systems * Records all required drilling data accurately
Driller
Lynn Haven, FL · On-site
$21 - $28.75/hr
Operates Geoprobe equipment to collect soil samples and Cone Penetration Test (CPT) data * Locates boring positions using maps, plans, or GPS systems * Records all required drilling data accurately
Driller
Lynn Haven, FL · On-site
$21 - $28.75/hr
Operates Geoprobe equipment to collect soil samples and Cone Penetration Test (CPT) data * Locates boring positions using maps, plans, or GPS systems * Records all required drilling data accurately
Driller
Lynn Haven, FL · On-site
$21 - $28.75/hr
Operates Geoprobe equipment to collect soil samples and Cone Penetration Test (CPT) data * Locates boring positions using maps, plans, or GPS systems * Records all required drilling data accurately
Driller
Tallahassee, FL · On-site
$19.50 - $26.50/hr
Operates Geoprobe equipment to collect soil samples and Cone Penetration Test (CPT) data * Locates boring positions using maps, plans, or GPS systems * Records all required drilling data accurately
Driller
Tallahassee, FL · On-site
$19.50 - $26.50/hr
Operates Geoprobe equipment to collect soil samples and Cone Penetration Test (CPT) data * Locates boring positions using maps, plans, or GPS systems * Records all required drilling data accurately
Cyber Security Specialist
Panama City, FL · On-site
$80 - $110/hr
Conduct regular security assessments, vulnerability scans, and penetration tests. * Develop and enforce security policies, procedures, and best practices. * Respond to security incidents and ...
Cyber Security Specialist
Panama City, FL · On-site
$80 - $110/hr
Conduct regular security assessments, vulnerability scans, and penetration tests. * Develop and enforce security policies, procedures, and best practices. * Respond to security incidents and ...
Cyber Security Specialist
Panama City, FL · On-site
$90 - $130/hr
Conduct regular security assessments, vulnerability scans, and penetration tests. * Develop and enforce security policies, procedures, and best practices. * Respond to security incidents and ...
Cyber Security Specialist
Panama City, FL · On-site
$90 - $130/hr
Conduct regular security assessments, vulnerability scans, and penetration tests. * Develop and enforce security policies, procedures, and best practices. * Respond to security incidents and ...
Cybersecurity Test Manager
FL · On-site
... penetration testing, and risk assessments. * Knowledge of DoD acquisition process. * Understanding of network security/engineering. * Certifications: CISSP, CASP. RESPONSIBILITIES * Manage test ...
Cybersecurity Test Manager
FL · On-site
... penetration testing, and risk assessments. * Knowledge of DoD acquisition process. * Understanding of network security/engineering. * Certifications: CISSP, CASP. RESPONSIBILITIES * Manage test ...
... penetration testing, and risk assessments. * Knowledge of DoD acquisition process. * Understanding of network security/engineering. * Certifications: CISSP, CASP. RESPONSIBILITIES * Manage test ...
Quick apply
... penetration testing, and risk assessments. * Knowledge of DoD acquisition process. * Understanding of network security/engineering. * Certifications: CISSP, CASP. RESPONSIBILITIES * Manage test ...
Cybersecurity Test Manager
FL · On-site
... penetration testing, and risk assessments. * Knowledge of DoD acquisition process. * Understanding of network security/engineering. * Certifications: CISSP, CASP. RESPONSIBILITIES * Manage test ...
Cybersecurity Test Manager
FL · On-site
... penetration testing, and risk assessments. * Knowledge of DoD acquisition process. * Understanding of network security/engineering. * Certifications: CISSP, CASP. RESPONSIBILITIES * Manage test ...
... penetration testing, and risk assessments. * Knowledge of DoD acquisition process. * Understanding of network security/engineering. * Certifications: CISSP, CASP. RESPONSIBILITIES * Manage test ...
Quick apply
... penetration testing, and risk assessments. * Knowledge of DoD acquisition process. * Understanding of network security/engineering. * Certifications: CISSP, CASP. RESPONSIBILITIES * Manage test ...
Conduct regular security assessments, vulnerability scans, and penetration tests. * Develop and enforce security policies, procedures, and best practices. * Respond to security incidents and ...
Conduct regular security assessments, vulnerability scans, and penetration tests. * Develop and enforce security policies, procedures, and best practices. * Respond to security incidents and ...
Conduct regular security assessments, vulnerability scans, and penetration tests. * Develop and enforce security policies, procedures, and best practices. * Respond to security incidents and ...
Conduct regular security assessments, vulnerability scans, and penetration tests. * Develop and enforce security policies, procedures, and best practices. * Respond to security incidents and ...
Penetration Test information
See Florida salary details
$16.8K - $26.7K
0% of jobs
$26.7K - $36.7K
0% of jobs
$36.7K - $46.6K
2% of jobs
$46.6K - $56.5K
3% of jobs
$56.5K - $66.4K
1% of jobs
$75.5K is the 25th percentile. Wages below this are outliers.
$66.4K - $76.3K
20% of jobs
$76.3K - $86.2K
14% of jobs
The median wage is $90K / yr.
$86.2K - $96.2K
26% of jobs
$103.2K is the 75th percentile. Wages above this are outliers.
$96.2K - $106.1K
13% of jobs
$106.1K - $116K
13% of jobs
$116K - $125.9K
9% of jobs
$16.8K
$89.6K
$125.9K
How much do penetration test jobs pay per year?
What is a penetration tester?
What are the key skills and qualifications needed to thrive as a penetration tester, and why are they important?
What are the typical challenges faced by penetration testers when working with clients?
What is the difference between Penetration Test vs Vulnerability Analyst?
| Aspect | Penetration Test | Vulnerability Analyst |
|---|---|---|
| Certifications | OSCP, CEH, GPEN | CVE, CISSP, GIAC |
| Work Environment | Simulated attacks on systems to identify security gaps | Scanning and analyzing vulnerabilities in networks and applications |
| Employer & Industry Usage | Cybersecurity firms, IT departments, consulting | Security teams, risk management, compliance |
While both roles focus on cybersecurity, Penetration Testers actively exploit vulnerabilities to assess security defenses, whereas Vulnerability Analysts identify and prioritize vulnerabilities without exploiting them. Both roles are essential for a comprehensive security strategy and often collaborate within security teams.
How much do penetration testers make?
Is a penetration test a good career?
Is there a demand for penetration testing?
What is the average pay for penetration testing?
What are the most commonly searched types of Penetration Test jobs in Florida?
The most popular types of Penetration Test jobs in Florida are:
What are popular job titles related to Penetration Test jobs in Florida?
For Penetration Test jobs in Florida, the most frequently searched job titles are:
What job categories do people searching Penetration Test jobs in Florida look for?
The top searched job categories for Penetration Test jobs in Florida are:
What cities in Florida are hiring for Penetration Test jobs?
Cities in Florida with the most Penetration Test job openings:

Delivery Senior Consultant, Penetration Tester
Lake Mary, FL • On-site
8.2
Based on 93 frontline employees who took The Breakroom Quiz
45th of 152 rated financial services
Good employer
Recommended by students
Paid breaks
Recommended by parents
Respectful managers
Full-time
Re-posted 12 days ago
Job description
Our Deloitte Cyber team understands the unique challenges and opportunities businesses face in cybersecurity. Join our team to deliver powerful solutions to help our clients navigate the ever-changing threat landscape. Through powerful solutions and managed services that simplify complexity, we enable our clients to operate with resilience, grow with confidence, and proactively manage to secure success.
We are seeking a skilled Penetration Tester to assess the security of web applications, APIs, and related systems. This role is responsible for identifying vulnerabilities, validating exploitability, and providing practical remediation guidance to improve overall application security posture. The ideal candidate combines hands-on offensive security experience with strong knowledge of secure development practices and common web application attack vectors.
Work you'll do
As a Penetration Tester on the Cyber Defense & Resilience team, you will be responsible for...
- Perform manual and automated penetration testing of web applications, APIs, and supporting infrastructure.
- Identify, validate, and document security vulnerabilities such as those in the OWASP Top 10.
- Conduct authenticated and unauthenticated testing across development, test, and production-like environments.
- Assess application security controls including authentication, authorization, session management, input validation, and encryption.
- Prepare clear, risk-based reports with technical findings, business impact, proof of concept, and remediation recommendations.
- Work with developers, architects, and security teams to explain findings and support remediation efforts.
- Retest remediated issues and confirm closure.
- Contribute to security standards, testing methodologies, and internal knowledge sharing.
- Stay current on emerging threats, exploit techniques, and application security trends.
A successful candidate would possess these skills:
- Ability to work independently and collaborate as part of a team
- Effective written and verbal communication skills
- Meticulous attention to detail and quality of work product
- Ability to build and sustain professional relationships
- Ability to lead projects or workstreams
- Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment
- Strong interpersonal skills and professional demeanor
- Ability to meet deadlines
- Ability to provide clear guidance to others
The Team
Deloitte's Government & Public Services (GPS) practice - our people, ideas, technology and outcomes - is designed for impact. Serving federal, state, & local government clients as well as public higher education institutions, our team of professionals brings fresh perspective to help clients anticipate disruption, reimagine the possible, and fulfill their mission promise.
Our Cyber Defense & Resilience offering assists clients in defending against advanced threats by transforming security operations, monitoring technology, data analytics, and threat intelligence. Helps manage and protect dynamic attack surfaces and provides rapid crisis and cyber incident response, ensuring clients can be ready for, respond to, and recover from business disruptions.
This opportunity sits within our Deloitte US Delivery Center model, which is dedicated to driving impactful business services. It leverages Deloitte's scale and talent, as well as a center delivery model to provide high-quality, cost-effective service with standardized processes and procedures to service businesses across Deloitte.
The Deloitte US Delivery Center has a small-business feel with a big-business impact. With the resources of Deloitte and a community feel, the delivery center model provides high-quality services to our clients. USDC professionals work out of one of our specific delivery center locations, and each location presents dynamic career opportunities for professionals to focus on their work with nominal travel requirements.
Qualifications
Required:
- Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related technical field
- Ability to obtain and maintain the necessary clearance for the role.
- Offensive Security Certified Professional (OSCP), Offensive Security Web Expert (OSWE), GIAC Penetration Tester (GPEN), or Certified Ethical Hacker (CEH).
- 2+ years of experience within the following:
- Hands-on penetration testing experience with a focus on web applications.
- Strong understanding of web technologies including HTTP/S, REST APIs, JavaScript, cookies, headers, and sessions.
- Experience identifying vulnerabilities such as SQL injection, XSS, CSRF, SSRF, IDOR, authentication flaws, and access control weaknesses.
- Proficiency with common testing tools such as Burp Suite, OWASP ZAP, Nmap, Postman, and similar tools.
- Experience writing professional penetration test reports for technical and non-technical audiences.
- Familiarity with OWASP Top 10, CWE, CVSS, and secure coding principles
- Delivery Center Location & Travel Requirements:
- Hybrid Work Model: Operate under a hybrid system requiring residence within a commutable distance to one of the US Delivery Center locations (Gilbert, Lake Mary, or Mechanicsburg) or Geo-Hub locations (Atlanta, Charlotte, Dallas, Houston, and Philadelphia)
- Co-location Expectation: Spend up to 30% of working time co-located at an assigned office for orchestrated opportunities, including projects, practice sessions, training, and Moments That Matter at a Deloitte Delivery Center location, Geo-Hub location, approved site, or project location
- Travel Requirement: Maximum of 10% overnight travel for client or project purposes
- Relocation Requirement: If relocation is necessary, complete the move within 12 weeks from the start date to reside within a commutable distance
- Must be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future.
Preferred:
- Experience testing modern frameworks and architectures such as single-page applications, microservices, and cloud-hosted applications.
- Knowledge of CI/CD pipelines and DevSecOps practices.
- Experience with source code review or secure code assessment.
- Familiarity with cloud platforms such as AWS, Azure, or GCP.
Our Deloitte Cyber team understands the unique challenges and opportunities businesses face in cybersecurity. Join our team to deliver powerful solutions to help our clients navigate the ever-changing threat landscape. Through powerful solutions and managed services that simplify complexity, we enable our clients to operate with resilience, grow with confidence, and proactively manage to secure success.
We are seeking a skilled Penetration Tester to assess the security of web applications, APIs, and related systems. This role is responsible for identifying vulnerabilities, validating exploitability, and providing practical remediation guidance to improve overall application security posture. The ideal candidate combines hands-on offensive security experience with strong knowledge of secure development practices and common web application attack vectors.
Work you'll do
As a Penetration Tester on the Cyber Defense & Resilience team, you will be responsible for...
- Perform manual and automated penetration testing of web applications, APIs, and supporting infrastructure.
- Identify, validate, and document security vulnerabilities such as those in the OWASP Top 10.
- Conduct authenticated and unauthenticated testing across development, test, and production-like environments.
- Assess application security controls including authentication, authorization, session management, input validation, and encryption.
- Prepare clear, risk-based reports with technical findings, business impact, proof of concept, and remediation recommendations.
- Work with developers, architects, and security teams to explain findings and support remediation efforts.
- Retest remediated issues and confirm closure.
- Contribute to security standards, testing methodologies, and internal knowledge sharing.
- Stay current on emerging threats, exploit techniques, and application security trends.
A successful candidate would possess these skills:
- Ability to work independently and collaborate as part of a team
- Effective written and verbal communication skills
- Meticulous attention to detail and quality of work product
- Ability to build and sustain professional relationships
- Ability to lead projects or workstreams
- Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment
- Strong interpersonal skills and professional demeanor
- Ability to meet deadlines
- Ability to provide clear guidance to others
The Team
Deloitte's Government & Public Services (GPS) practice - our people, ideas, technology and outcomes - is designed for impact. Serving federal, state, & local government clients as well as public higher education institutions, our team of professionals brings fresh perspective to help clients anticipate disruption, reimagine the possible, and fulfill their mission promise.
Our Cyber Defense & Resilience offering assists clients in defending against advanced threats by transforming security operations, monitoring technology, data analytics, and threat intelligence. Helps manage and protect dynamic attack surfaces and provides rapid crisis and cyber incident response, ensuring clients can be ready for, respond to, and recover from business disruptions.
This opportunity sits within our Deloitte US Delivery Center model, which is dedicated to driving impactful business services. It leverages Deloitte's scale and talent, as well as a center delivery model to provide high-quality, cost-effective service with standardized processes and procedures to service businesses across Deloitte.
The Deloitte US Delivery Center has a small-business feel with a big-business impact. With the resources of Deloitte and a community feel, the delivery center model provides high-quality services to our clients. USDC professionals work out of one of our specific delivery center locations, and each location presents dynamic career opportunities for professionals to focus on their work with nominal travel requirements.
Qualifications
Required:
- Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related technical field
- Ability to obtain and maintain the necessary clearance for the role.
- Offensive Security Certified Professional (OSCP), Offensive Security Web Expert (OSWE), GIAC Penetration Tester (GPEN), or Certified Ethical Hacker (CEH).
- 2+ years of experience within the following:
- Hands-on penetration testing experience with a focus on web applications.
- Strong understanding of web technologies including HTTP/S, REST APIs, JavaScript, cookies, headers, and sessions.
- Experience identifying vulnerabilities such as SQL injection, XSS, CSRF, SSRF, IDOR, authentication flaws, and access control weaknesses.
- Proficiency with common testing tools such as Burp Suite, OWASP ZAP, Nmap, Postman, and similar tools.
- Experience writing professional penetration test reports for technical and non-technical audiences.
- Familiarity with OWASP Top 10, CWE, CVSS, and secure coding principles
- Delivery Center Location & Travel Requirements:
- Hybrid Work Model: Operate under a hybrid system requiring residence within a commutable distance to one of the US Delivery Center locations (Gilbert, Lake Mary, or Mechanicsburg) or Geo-Hub locations (Atlanta, Charlotte, Dallas, Houston, and Philadelphia)
- Co-location Expectation: Spend up to 30% of working time co-located at an assigned office for orchestrated opportunities, including projects, practice sessions, training, and Moments That Matter at a Deloitte Delivery Center location, Geo-Hub location, approved site, or project location
- Travel Requirement: Maximum of 10% overnight travel for client or project purposes
- Relocation Requirement: If relocation is necessary, complete the move within 12 weeks from the start date to reside within a commutable distance
- Must be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future.
Preferred:
- Experience testing modern frameworks and architectures such as single-page applications, microservices, and cloud-hosted applications.
- Knowledge of CI/CD pipelines and DevSecOps practices.
- Experience with source code review or secure code assessment.
- Familiarity with cloud platforms such as AWS, Azure, or GCP.
About Deloitte
Sourced by ZipRecruiter
Industry
Finance and insurance and business management consulting
Company size
10,000+ Employees
Headquarters location
Orlando, FL, US