ZipRecruiter

Log In

1

Penetration Testing Jobs (NOW HIRING)

Omni Inclusive

Penetration Tester

Cary, NC · On-site

Client Webinspect and HCL Appscan preferred - any other tools is OK as well Minimum 7 years of experience Work with enterprise programs on penetration testing and online application security Worked ...

TekSynap

Penetration Tester

Reston, VA · On-site

Coordinate penetration testing activities and schedules with internal stakeholders, system owners, and external partners as required. * Perform network vulnerability assessments and exploitation ...

TekSynap

Penetration Tester

Coordinate penetration testing activities and schedules with internal stakeholders, system owners, and external partners as required. * Perform network vulnerability assessments and exploitation ...

Cyber Defense Technologies

Penetration Tester

Chantilly, VA · On-site

$90K - $130K/yr

Conduct penetration testing that uses both active and passive capabilities to expose and exploit IA vulnerabilities. * Review and evaluate information systems and recommend changes to the Government ...

Cyber Defense Technologies

Penetration Tester

Chantilly, VA · On-site

$90K - $130K/yr

Conduct penetration testing that uses both active and passive capabilities to expose and exploit IA vulnerabilities. * Review and evaluate information systems and recommend changes to the Government ...

Cyber Defense Technologies

Penetration Tester

Chantilly, VA · On-site

$90K - $130K/yr

Conduct penetration testing that uses both active and passive capabilities to expose and exploit IA vulnerabilities. * Review and evaluate information systems and recommend changes to the Government ...

Sunrise Systems

Penetration Tester

$92.30/hr

Title: Penetration Tester Job ID: 26-03154 Location: Remote Duration: 12 Months on W2 contract ... Web Application, API, and Infrastructure Security Testing * Vulnerability Assessment & Remediation ...

Peraton

Penetration Tester

Arlington, VA · On-site

Minimum of 2 years with penetration testing experience. * Possess one of the following certifications, OR be able to obtain before start date: * CCNA Cyber Ops, CCNA-Security, CEH, CFR, Cloud+, CySA ...

Peraton

Penetration Tester

Arlington, VA · On-site

$86K - $138K/yr

Minimum of 2 years with penetration testing experience. * Possess one of the following certifications, OR be able to obtain before start date: * CCNA Cyber Ops, CCNA-Security, CEH, CFR, Cloud+, CySA ...

SkyePoint Decisions

Penetration Tester

Arlington, VA

$95K - $112K/yr

Minimum of 2 years with penetration testing experience. * Possess one of the following certifications, OR be able to obtain before start date: * CCNA Cyber Ops, CCNA-Security, CEH, CFR, Cloud+, CySA ...

Peraton

Penetration Tester

Arlington, VA · On-site

$86K - $138K/yr

Minimum of 2 years with penetration testing experience. * Possess one of the following certifications, OR be able to obtain before start date: * CCNA Cyber Ops, CCNA-Security, CEH, CFR, Cloud+, CySA ...

SkyePoint Decisions

Penetration Tester

Arlington, VA · On-site

$95K - $112K/yr

Minimum of 2 years with penetration testing experience. * Possess one of the following certifications, OR be able to obtain before start date: * CCNA Cyber Ops, CCNA-Security, CEH, CFR, Cloud+, CySA ...

Peraton

Penetration Tester

Arlington, VA

$86K - $138K/yr

Minimum of 2 years with penetration testing experience. * Possess one of the following certifications, OR be able to obtain before start date: * CCNA Cyber Ops, CCNA-Security, CEH, CFR, Cloud+, CySA ...

Concord IT Systems

Penetration Tester

Basking Ridge, NJ · On-site

Must Have Skills: • Penetration Testing • Burp Suit • Wireshark Detailed • Experienced & Hands on Penetration tester (preferably with CEH certification) with experience in both web & mobile ...

Goldbelt, Inc.

Senior Penetration Tester

$90K - $150K/yr

Performs application and network penetration testing and wireless security assessments. * Applies offensive cybersecurity testing techniques, coordinate testing projects with internal and external ...

next page

Showing results 1-20

All JobsPenetration Testing Jobs

Penetration Testing information

See salary details

$22.5K

$119.9K

$168.5K

How much do penetration testing jobs pay per year?

As of Jul 7, 2026, the average yearly pay for penetration testing in the United States is $119,895.00, according to ZipRecruiter salary data. Most workers in this role earn between $96,000.00 and $141,000.00 per year, depending on experience, location, and employer.

What are some common challenges faced by penetration testers during client engagements?

Penetration testers often encounter challenges such as limited access to information, time constraints, and complex network environments that can hinder thorough assessments. Additionally, balancing the need to simulate real-world attacks while ensuring no disruption to client operations requires careful planning and communication. Collaborating effectively with IT teams and clearly documenting findings are crucial for ensuring that vulnerabilities are properly understood and addressed.

Will AI replace pentesters?

AI can assist penetration testers by automating repetitive tasks and analyzing large data sets, but it cannot fully replace the critical thinking, creativity, and adaptability required in penetration testing. Human expertise remains essential for identifying complex vulnerabilities, developing attack strategies, and interpreting results. As AI tools evolve, they will serve as valuable supplements rather than substitutes for skilled pentesters.

Is penetration tester a good career?

A penetration tester is a cybersecurity professional who assesses computer systems and networks for vulnerabilities using tools like Kali Linux and Metasploit. The role offers high demand, competitive salaries, and opportunities for specialization and certification, making it a strong career choice for those interested in cybersecurity and ethical hacking.

Can I make $200,000 a year in cyber security?

Penetration testers and cybersecurity professionals can earn $200,000 or more annually, especially with advanced skills, certifications like OSCP or CISSP, and experience in high-demand environments. Senior roles, specialized expertise, and working for large organizations or consulting firms often contribute to higher salaries.

What is the difference between Penetration Testing vs Vulnerability Assessment?

AspectPenetration TestingVulnerability Assessment
PurposeSimulate cyberattacks to identify exploitable vulnerabilitiesIdentify and prioritize security weaknesses
DepthIn-depth, targeted testingBroad, comprehensive scanning
CertificationsOSCP, CEH, GPENOSCP, CEH, Security+
Work EnvironmentHands-on testing, simulated attacksAutomated scans, reports

While both roles focus on security weaknesses, Penetration Testing involves actively exploiting vulnerabilities to assess real-world impact, whereas Vulnerability Assessment identifies potential issues for prioritization. Penetration Testing provides a deeper, more targeted security evaluation, making it essential for comprehensive security testing.

What is penetration testing?

Penetration testing, also known as ethical hacking, is a security practice where professionals simulate cyberattacks on a computer system, network, or application to identify vulnerabilities before malicious hackers can exploit them. The goal is to find and safely exploit weaknesses, assess the impact of potential attacks, and provide recommendations to improve security. Penetration testers use a variety of tools and techniques, often mirroring real-world attack methods, to thoroughly evaluate an organization’s defenses. It is a proactive approach to improving an organization's cybersecurity posture.

How much do penetration testers make?

Penetration testers typically earn between $70,000 and $130,000 annually, depending on experience, certifications, and location. Senior professionals with advanced skills and certifications like OSCP or CISSP can earn higher salaries, especially in high-demand markets or specialized environments.
More about Penetration Testing jobs
What cities are hiring for Penetration Testing jobs? Cities with the most Penetration Testing job openings:
What are the most commonly searched types of Penetration Testing jobs? The most popular types of Penetration Testing jobs are:
What states have the most Penetration Testing jobs? States with the most job openings for Penetration Testing jobs include:
Penetration Testing jobs near you
Infographic showing various Penetration Testing job openings in the United States as of July 2026, with employment types broken down into 1% Locum Tenens, 94% Full Time, 2% Part Time, 2% Contract, and 1% Summer. Highlights an 83% Physical, 2% Hybrid, and 15% Remote job distribution, with an average salary of $119,895 per year, or $57.6 per hour.
Web Application Penetration Testing

Web Application Penetration Testing

Ampcus

Chantilly, VA • On-site

Other

Posted 28 days ago

Job description

Web Application Penetration Testing

Ampcus Inc. is a certified global provider of a broad range of Technology and Business consulting services. We are in search of a highly motivated candidate to join our talented team. Location: Chantilly, VA. Position Overview:

We are seeking an experienced and results-driven Penetration Tester to support them in performing comprehensive web application security assessments as part of the Web Application Penetration Testing opportunity. The ideal candidate will have a deep understanding of web application security, vulnerability assessment, and threat exploitation methodologies. This role requires a professional who can think like an attacker, assess systems holistically, and provide actionable insights that enhance the security posture of critical government systems.

Key Responsibilities:

  • Conduct web application, API, and network penetration tests to identify and validate security vulnerabilities.
  • Perform grey-box and black-box testing following NIST SP 800-115 and OWASP Testing Framework methodologies.
  • Evaluate authentication mechanisms, session management, access controls, and data handling practices for security flaws.
  • Execute vulnerability exploitation and proof-of-concept validation to demonstrate real-world risk impact.
  • Document findings with technical precision and provide clear remediation recommendations to stakeholders.
  • Collaborate with internal security engineers and client teams to verify vulnerability fixes and perform retesting.
  • Prepare and deliver comprehensive technical and executive-level reports that align with the COV Information Security Standard (SEC530).
  • Support secure configuration reviews and compliance with applicable state and federal cybersecurity standards.

Required Minimum Qualifications:

  • Bachelor's degree in computer science, Cybersecurity, Information Technology, or a related field (or equivalent experience).
  • Preferably 7 years of experience in penetration testing or ethical hacking, with a strong focus on web applications and APIs.
  • In-depth knowledge of web technologies, networking protocols, authentication systems, and encryption standards.
  • Strong understanding of secure development practices (SDLC) and common vulnerabilities (OWASP Top 10).
  • Excellent analytical, documentation, and communication skills.

Preferred Certifications:

  • CEH (Certified Ethical Hacker) – Required.
  • OSCP (Offensive Security Certified Professional) – Preferred.
  • CompTIA Security / CySA / GPEN / GWAPT – Desirable.

Desired Attributes:

  • Critical thinkers with the ability to simulate real-world attacks creatively and effectively.
  • Detail-oriented with strong problem-solving and analytical skills.
  • Proactive, self-motivated, and able to manage multiple testing assignments.
  • Collaborative and professional, with the ability to work effectively in client-facing environments.
  • Strong commitment to confidentiality, ethical standards, and data security compliance.

Ampcus is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, protected veterans or individuals with disabilities.

Ampcus logo

About Ampcus

Sourced by ZipRecruiter

Ampcus Inc. is a ISO 20000, ISO 27000, ISO 9001, CMMI DEV/3 SM and CMMI SVC/3 SM certified global provider of a broad range of Technology and Business consulting services. From strategy to execution, our disciplined yet flexible approach starts and ends with our clients. By listening hard and working harder, client goals become our goals. Their success is our satisfaction. It’s why our clients sleep well at night. We believe that the success of an engagement is determined by strong project management, as well as clear communication and mutual commitment working collaboratively. Our methodology begins with listening to the customer about their needs, then working with their team to gain a clear understanding of the requirements, while providing knowledge transfer of best practices for the organization.

Industry

It services

Company size

1,001 - 5,000 Employees

Headquarters location

Chantilly, VA, US

Year founded

2004

View All Ampcus Jobs

Apply