ZipRecruiter

Log In

1

Penetration Testers Jobs (NOW HIRING)

Quzara LLC

Senior Penetration Tester

Washington, DC · On-site

$145K - $180K/yr

Quzara is hiring Penetration Testers across multiple experience levels, with a primary focus on mid-level and senior professionals. During the selection process, candidates will be assessed and ...

SkyePoint Decisions

Penetration Tester

Arlington, VA

$95K - $112K/yr

Demonstrated ability to lead a penetration test and guide Senior/Junior Penetration Testers. * U.S. citizenship required. * An active Secret security clearance. * Must have the ability to obtain a ...

ClearFocus Technologies

MD · On-site

Mentor junior penetration testers and review technical deliverables for quality and accuracy. Required Qualifications * 7+ years of hands-on penetration testing, red team, or offensive security ...

Peraton

Penetration Tester

Arlington, VA · On-site

$86K - $138K/yr

Demonstrated ability to lead a penetration test and guide Senior/Junior Penetration Testers. * U.S. citizenship required. * An active Secret security clearance. * Must have the ability to obtain a ...

Peraton

Penetration Tester

Arlington, VA · On-site

$86K - $138K/yr

Demonstrated ability to lead a penetration test and guide Senior/Junior Penetration Testers. * U.S. citizenship required. * An active Secret security clearance. * Must have the ability to obtain a ...

Techcompass

$90 - $130/hr

Our testers simulate realistic attack paths, validate whether weaknesses can actually be exploited ... S.-based penetration testers as our team and client needs grow. How this works: These are 1099 ...

Peraton

Penetration Tester / Active Secret

Arlington, VA · On-site

$86K - $138K/yr

Demonstrated ability to lead a penetration test and guide Senior/Junior Penetration Testers. * U.S. citizenship required. * An active Secret security clearance. * Must have the ability to obtain a ...

Peraton

Penetration Tester / Active Secret

Arlington, VA · On-site

$86K - $138K/yr

Demonstrated ability to lead a penetration test and guide Senior/Junior Penetration Testers. * U.S. citizenship required. * An active Secret security clearance. * Must have the ability to obtain a ...

Peraton

Penetration Tester / Active Secret

Arlington, VA · On-site

$86K - $138K/yr

Demonstrated ability to lead a penetration test and guide Senior/Junior Penetration Testers. * U.S. citizenship required. * An active Secret security clearance. * Must have the ability to obtain a ...

next page

Showing results 1-20

All JobsPenetration Testers Jobs

Penetration Testers information

See salary details

$22.5K

$119.9K

$168.5K

How much do penetration testers jobs pay per year?

As of Sep 4, 2026, the average yearly pay for penetration testers in the United States is $119,895.00, according to ZipRecruiter salary data. Most workers in this role earn between $96,000.00 and $141,000.00 per year, depending on experience, location, and employer.

What is the difference between Penetration Testers vs Security Analysts?

AspectPenetration TestersSecurity Analysts
CertificationsOSCP, CEH, GPENCISSP, Security+
Work EnvironmentSimulated attacks, offensive securityMonitoring, incident response
Employer & Industry UsageCybersecurity firms, IT departmentsCorporate, government, finance sectors
Search & Comparison IntentUnderstanding offensive security rolesDefensive security roles

Penetration Testers focus on simulating cyberattacks to identify vulnerabilities, while Security Analysts monitor and respond to security threats. Both roles require cybersecurity certifications but differ in their approach—offensive versus defensive. Penetration Testers are proactive, testing systems for weaknesses, whereas Security Analysts are reactive, managing security incidents. Understanding these differences helps organizations build comprehensive security teams.

How much do penetration testers make?

Penetration testers typically earn between $70,000 and $130,000 annually, depending on experience, certifications, and location. Senior professionals with advanced skills and certifications like OSCP or CISSP can earn higher salaries, especially in high-demand markets or specialized environments.

Is penetration tester a good career?

A penetration tester is a cybersecurity professional who assesses computer systems and networks for vulnerabilities using tools like Kali Linux and Metasploit. The role offers high demand, competitive salaries, and opportunities for specialization and certification, such as OSCP or CEH. It requires strong technical skills, problem-solving ability, and ongoing learning to stay current with evolving threats.

What does a penetration tester do?

A penetration tester, also known as an ethical hacker, evaluates the security of computer systems, networks, and applications by simulating cyberattacks to identify vulnerabilities. They use tools like vulnerability scanners and perform manual testing to help organizations strengthen their defenses and often hold certifications such as OSCP or CEH. The role requires strong technical skills, knowledge of security protocols, and adherence to legal and ethical standards.
More about Penetration Testers jobs

What cities are hiring for Penetration Testers jobs?

Cities with the most Penetration Testers job openings:

What states have the most Penetration Testers jobs?

States with the most job openings for Penetration Testers jobs include:

What job categories do people searching Penetration Testers jobs look for?

The top searched job categories for Penetration Testers jobs are:

Penetration Testers jobs near you
Infographic showing various Penetration Testers job openings in the United States as of August 2026, with employment types broken down into 96% Full Time, 2% Part Time, and 2% Contract. Highlights an 79% Physical, 4% Hybrid, and 17% Remote job distribution, with an average salary of $119,895 per year, or $57.6 per hour.

Senior Penetration Tester

Quzara LLC

Washington, DC • On-site

$145K - $180K/yr

Full-time

Re-posted 14 days ago

Key responsibilities

  • Plan, create, and execute advanced penetration methods, scripts, and tests for web applications, internal networks, cloud environments, and client infrastructure.

  • Assess and test the security of internal networks, application infrastructure, and Azure cloud infrastructure, identifying security weaknesses and simulating security breaches.

  • Create detailed reports, risk assessments, and recommendations based on testing findings, and present these to management and relevant parties.

Job description

Quzara is hiring Penetration Testers across multiple experience levels, with a primary focus on mid-level and senior professionals. During the selection process, candidates will be assessed and placed at the level that best reflects their experience and qualifications.


Job Title: Senior Penetration Tester   

Pay Type: SALARIED EXEMPT 

Location: Hybrid, Washington, DC 

US Citizenship: Required

Summary of Position Role/Responsibilities

The Senior Penetration Tester will lead and execute advanced security assessments across web applications, APIs, internal networks, cloud environments, and client infrastructure. This role is responsible for planning and performing penetration tests and vulnerability assessments, simulating real-world attack scenarios, identifying security weaknesses, and translating findings into clear reports, risk assessments, and actionable recommendations for technical and leadership audiences. The Senior Penetration Tester will also support client coordination, report delivery, and debriefs while mentoring penetration testing team members and maintaining advanced expertise in security tools, scripting, networking, web application security, and emerging offensive security techniques.

Essential Functions of the Job

  • Plan, create, and execute advanced penetration methods, scripts, and tests for the team, with a focus on Web Applications
  • Assess and test the security of internal networks and underlying application infrastructure.
  • Conduct penetration testing and vulnerability assessments on Azure cloud infrastructure and applications
  • Lead and mentor a team of penetration testers, providing guidance and sharing expertise
  • Carry out remote and on-site testing of client networks and infrastructure to expose security weaknesses
  • Simulate security breaches to assess a system's relative security
  • Create detailed reports and recommendations based on findings, including uncovered security issues and associated risk levels
  • Present findings, risk assessments, and conclusions to management and other relevant parties
  • Maintain advanced knowledge of networking, cryptography, reverse engineering, web applications, operating systems databases
  • Possess expertise in various scripting and programming languages, including Python, SQL, C/C++, JavaScript, PHP, Java, and Ruby
  • Provide strong written and oral communication skills to effectively convey assessment results and potential weaknesses
  • Assist in penetration testing intake, coordination with client teams for scheduling and delivery of reports/debriefs.

Marginal Functions of the Job

  • Other duties as assigned

Normal Work Schedule

This is a full-time position. Standard business hours are Monday through Friday 8:30 AM to 5:30 PM. If your role falls within our Security Operations Center, you will be assigned a specific shift. As a result, your working schedule may require flexibility to cover any shift that falls within a 24/7 cycle, it may also change and rotate, including nights, weekends, and holidays.

Education, Training, and Experience Requirements

  • Required bachelor’s degree in cyber security, computer science, IT or a related field.
  • Required: A fundamental understanding and experience with business/application logic vulnerabilities.
  • Required: 6 years minimum work experience directly related to Red Team assessments, and/or penetration testing (intranet, internet, web, wireless, social engineering), with a focus on Web Application testing. Additional years of relevant experience may be considered in lieu of a bachelor’s degree.
  • Required: Must have an active OSCP+ certification in addition to one of the following:
    • CompTia PenTest+
    • CEH
    • CompTia CySa+
    • GCIH
    • GCFA
    • CISSP
  • Expertise with scripting languages (e.g., Python, PowerShell, Java, Perl, etc)
  • Expertise with API focused penetration testing.
  • Proficiency with penetration testing tools (Kali Linux, Binwalk, BurpSuite, Wireshark, etc)

Nice To Have:

  • Certification focuses on Web Application penetration testing.
    • i.e. eWPT, BSCP, etc
  • Relevant security research.
    • Accredited CVEs, research papers or contributions to the cyber security sphere.

EEO Statement

The Company is an Equal Employment Opportunity (EEO) employer and does not discriminate based on race, color, religion, sex, sexual orientation, national origin, age, marital status, disability, veteran's status, or any other basis protected by applicable discrimination laws.