2

Remote Ethical Hacker Jobs (NOW HIRING)

... Ethical Hacker (CEH) 3. c) Certified Information Security Manager (CISM) • Knowledge/experience ... remote work with possible travel to conferences and meetings at DC HQ. About the Company Culmen ...

This is a remote position. MasonBlue Security is seeking a highly skilled and motivated ... ethical hacking. * Assess and Evaluate : Create assessment tools to measure the effectiveness of ...

Interface with ethical hackers, triage reports, and guide product engineering teams to resolution ... fun, remote-friendly, start-up environment-apply anyway, detailing your relevant transferable ...

next page

Showing results 1-20

Remote Ethical Hacker information

See salary details

$24K

$87.2K

$109.5K

How much do remote ethical hacker jobs pay per year?

As of Jun 6, 2026, the average yearly pay for remote ethical hacker in the United States is $87,179.00, according to ZipRecruiter salary data. Most workers in this role earn between $82,500.00 and $99,000.00 per year, depending on experience, location, and employer.

What are remote ethical hackers?

Remote ethical hackers are cybersecurity professionals who work from off-site locations to assess, test, and improve the security of computer systems and networks. They use the same techniques as malicious hackers but do so legally and with permission to identify vulnerabilities before they can be exploited. Their work often involves penetration testing, vulnerability assessments, and reporting security weaknesses to organizations. Remote ethical hackers help businesses strengthen their defenses and ensure sensitive data remains protected.

How does a remote ethical hacker typically collaborate with internal security teams and other departments?

As a remote ethical hacker, collaboration is often facilitated through secure communication platforms, project management tools, and regular virtual meetings. You may work closely with internal security teams to share findings, discuss vulnerabilities, and coordinate remediation efforts. Additionally, ethical hackers often interact with IT, development, and compliance departments to ensure that security recommendations are aligned with business objectives and technical requirements. Effective written and verbal communication skills are key to building trust and ensuring timely resolution of security issues in a distributed work environment.

What are the key skills and qualifications needed to thrive as a Remote Ethical Hacker, and why are they important?

To thrive as a Remote Ethical Hacker, you need a deep understanding of network security, penetration testing, and vulnerability assessment, typically supported by a degree in computer science or a related field. Proficiency in tools like Metasploit, Burp Suite, Nmap, and certifications such as CEH or OSCP are highly valued. Strong analytical thinking, problem-solving abilities, and effective communication skills help you report findings clearly and collaborate with remote teams. These skills are crucial for identifying and mitigating security risks, ensuring organizations stay protected against cyber threats.

What is the difference between Remote Ethical Hacker vs Penetration Tester?

AspectRemote Ethical HackerPenetration Tester
CertificationsCEH, OSCP, CISSPCEH, OSCP, GPEN
Work EnvironmentRemote or on-site security assessmentsPrimarily on-site or remote testing engagements
Industry UsageUsed across various industries for security testingCommonly in cybersecurity firms and corporate security teams

Both Remote Ethical Hackers and Penetration Testers perform security assessments using similar certifications and skills. While Ethical Hackers often have a broader scope, including ongoing security consulting, Penetration Testers focus on simulated attacks to identify vulnerabilities. Both roles are vital in cybersecurity, frequently overlapping in responsibilities and work environments.

What Does a Remote Ethical Hacker Do?

Unlike a criminal hacker, as a remote ethical hacker, your responsibilities are to assist your clients by assessing their cybersecurity system by attempting to discover website or network vulnerabilities, identify security issues, and help test the systems by conducting attacks that simulate real-world hacking. Your duties include collaborating with other cybersecurity experts to assess the current performance and capabilities of a digital security system, develop and test different types of digital security tools, such as firewalls, and provide suggestions for further actions to increase security and safety.

What cities are hiring for Remote Ethical Hacker jobs? Cities with the most Remote Ethical Hacker job openings:
What are the most commonly searched types of Ethical Hacker jobs? The most popular types of Ethical Hacker jobs are:
What states have the most Remote Ethical Hacker jobs? States with the most job openings for Remote Ethical Hacker jobs include:
Infographic showing various Remote Ethical Hacker job openings in the United States as of May 2026, with employment types broken down into 70% Full Time, 10% Part Time, and 20% Contract. Highlights an 100% Remote job distribution, with an average salary of $87,179 per year, or $41.9 per hour.
Senior Penetration Tester (59660)

Senior Penetration Tester (59660)

Beshenich & Muir Associates

Fort Myer, VA • On-site, Remote

Full-time

Medical, Dental, Vision, Retirement

Posted 22 days ago


Job description

BMA is seeking a Senior Penetration Tester to support our Cybersecurity Assessment Program (CAP) Program. This position is fully remote and contingent on contract award.
Job Summary
Key elements of this work consist of but are not limited to:
  • Independently performs penetration testing of applications, systems, and enclaves; identifies security flaws in computing platforms and applications and devises strategies and techniques to mitigate identified cybersecurity risks
  • Performs application, network, and wireless penetration testing and security assessments
  • Applies offensive cybersecurity testing techniques and coordinates testing projects with internal and external system owners
  • Reports on identified cybersecurity risks and recommends mitigation measures to improve the overall cybersecurity posture of the enterprise
  • Applies in-depth knowledge of network protocols, operating systems, web application security, reverse engineering, and scripting languages to identify and mitigate vulnerabilities before they can be exploited by threat actors
  • Continuously refines and improves cybersecurity defenses and incident response plans
  • Supports the development of Assessment Final Reports, Mitigation Effectiveness Reports, and Rules of Engagement
  • Supports daily hotwash events, briefings and presentations, and scoping meetings

Clearance Requirements
An active Secret security clearance is required at the time of proposal submission.
Required Skills & Certifications
  • 6+ years of proven proficiency performing extensive vulnerability assessments and penetration testing
  • 3+ years of experience using testing tools including NESSUS, Metasploit, CANVAS, Nmap, Burp Suite, and Kismet
  • 3+ years of experience performing network vulnerability assessments and applying penetration testing methodologies
  • 3+ years of experience writing penetration testing and assessment reports
  • 2+ years of experience administering, using, and troubleshooting Windows Server and IIS
  • 2+ years of experience administering, using, and troubleshooting a major Linux distribution
  • 2+ years of experience performing PCI DSS testing
  • Possession of one or more penetration testing certifications such as Licensed Penetration Tester (LPT), Certified Expert Penetration Tester (CEPT), Certified Ethical Hacker (CEH), or GIAC Penetration Tester (GPEN)
  • Knowledge of TCP/IP protocols and networking architectures
  • Knowledge of open security testing standards and projects, including OWASP
  • Knowledge of database, application, and web server design and implementation
  • Experience scripting in Perl, Python, Ruby, Bash, or Java
  • Experience with wireless LAN security testing
  • Excellent oral communication, written documentation, and presentation skills

Desired Skills & Certifications
  • Experience supporting DLA contracts
  • Bachelor's degree in a relevant technical field
  • Project Management Professional (PMP) certification
  • Familiarity with enterprise networks and systems, including servers, databases, APIs, and Active Directory
  • Familiarity with web application concepts such as session management, business logic, and input validation
  • Familiarity with AI and large language model (LLM) security concerns, including data poisoning and prompt injection exploitation
  • Familiarity with operational technology (OT) environments, including SCADA system security and PLC security
  • Familiarity with wireless networks, including Bluetooth security and wireless intrusion detection and prevention systems (WIDS/WIPS)
  • Familiarity with DevSecOps pipelines, including SAST, DAST, and SCA implementation and automated security testing
  • Familiarity with hybrid environments, including the interconnectivity and security of on-premises and cloud-based systems

Other Duties
This job description is not designed to cover or contain a comprehensive listing of activities, duties, or responsibilities that are required of the employee for this job. Duties, responsibilities, and activities may change at any time with or without notice.
Overview
BMA is an employee-owned small business headquartered in Huntsville, AL that provides superior customer service by empowering all levels of our staff to make timely decisions to produce high-quality results. BMA fosters an environment of passion, precision, and dedication in order to fulfill our commitments to our partners, government, and country.
Benefits
We believe that our employees well-being is paramount to our success so our benefits package has been crafted with that in mind. We offer multiple healthcare coverage options to include low deductible, high deductible, and plans eligible for our Health Savings Account (HSA) option. Along with medical coverage, employees have dental, vision, accident & illness, short- and long-term disability all available to them. BMA proudly maintains a 401(k) plan with an industry leading 6% match that can include profit sharing based on company performance. Lastly, being an employee-owned company means that BMA offers a 100% Employee Stock Ownership Plan (ESOP), providing eligible employees the opportunity to earn stock in BMA, subject to plan eligibility and vesting requirements.
AAP & EEO Statement
Beshenich Muir & Associates, LLC (BMA) is an Equal opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regards to race, color, religion, religious creed, gender, sexual orientation, gender identity, gender expression, transgender, pregnancy, marital status, national origin, ancestry, citizenship status, age, disability, protected Veteran Status, genetics or any other characteristics protected by applicable Federal, State, or Local Law.