Burp Suite, Kali Linux, BugCrowd, Sonarqube * SecOps & Vulnerability: Tenable, Bitsight, OneTrust * IT & Endpoint Ecosystem: Jira, AWS, Sophos, JAMF, PDQ, BetterCloud * Certifications: CompTIA ...
Quick apply
Burp Suite, Kali Linux, BugCrowd, Sonarqube * SecOps & Vulnerability: Tenable, Bitsight, OneTrust * IT & Endpoint Ecosystem: Jira, AWS, Sophos, JAMF, PDQ, BetterCloud * Certifications: CompTIA ...
Quick apply
Burp Suite, Kali Linux, BugCrowd, Sonarqube * SecOps & Vulnerability: Tenable, Bitsight, OneTrust * IT & Endpoint Ecosystem: Jira, AWS, Sophos, JAMF, PDQ, BetterCloud * Certifications: CompTIA ...
Lehi, UT · On-site +1
Burp Suite, Kali Linux, BugCrowd, Sonarqube * SecOps & Vulnerability: Tenable, Bitsight, OneTrust * IT & Endpoint Ecosystem: Jira, AWS, Sophos, JAMF, PDQ, BetterCloud * Certifications: CompTIA ...
Lehi, UT · On-site +1
Burp Suite, Kali Linux, BugCrowd, Sonarqube * SecOps & Vulnerability: Tenable, Bitsight, OneTrust * IT & Endpoint Ecosystem: Jira, AWS, Sophos, JAMF, PDQ, BetterCloud * Certifications: CompTIA ...
$8.99 - $14.25
1% of jobs
$14.25 - $19.51
0% of jobs
$19.51 - $24.77
0% of jobs
$24.77 - $30.04
0% of jobs
$30.04 - $35.30
3% of jobs
$35.30 - $40.56
14% of jobs
$43.19 is the 25th percentile. Wages below this are outliers.
$40.56 - $45.82
15% of jobs
$45.82 - $51.09
17% of jobs
The median wage is $51.40 / hr.
$51.09 - $56.35
18% of jobs
$61.03 is the 75th percentile. Wages above this are outliers.
$56.35 - $61.61
9% of jobs
$61.61 - $66.87
24% of jobs
$8
$51
$66
| Aspect | Remote Kali Linux | Remote Penetration Tester |
|---|---|---|
| Credentials | Knowledge of Kali Linux, certifications like OSCP, CEH | Certifications like OSCP, CEH, CISSP often preferred |
| Work Environment | Using Kali Linux tools for security assessments, often in labs or client environments | Performing security testing, vulnerability assessments, and penetration tests remotely |
| Industry Usage | Security professionals, ethical hackers, cybersecurity teams | Cybersecurity firms, consulting companies, in-house security teams |
Remote Kali Linux involves using the Kali Linux OS and tools for security tasks, often as part of a broader penetration testing process. Remote Penetration Testers perform security assessments directly, utilizing Kali Linux but also engaging in client communication and report writing. While Kali Linux is a tool used by Penetration Testers, the latter role encompasses the entire testing process, making it a broader job title.

As a Security Engineer, you will play a critical role in safeguarding our organization's digital assets, infrastructure, and application ecosystem. This is a mid-level, autonomous role (not entry-level) where you will bridge the gap between IT operations, software development, and risk management.
You won't just be reviewing logs, settings, and configs; you will be actively replicating vulnerabilities, collaborating with developers on secure architecture, managing our bug bounty program, and keeping our security tool stack running smoothly.
Vulnerability & Application Security Management: Own the vulnerability management program end-to-end: oversee continuous vulnerability scanning (Tenable) and software composition analysis/code dependencies (Sonarqube), drive remediation across teams, and replicate and validate discovered vulnerabilities using tools like Burp Suite and Kali Linux.
Crowdsourced Security & Threat Intel: Manage and triage our crowdsourced bug bounty program (BugCrowd) and monitor our external security posture rating (Bitsight).
Secure Development Collaboration: Act as the security voice in developer architecture meetings. Partner with engineering teams to review code dependencies, threat-model new features, and ensure secure coding practices.
Risk & Change Management: Own and conduct system impact analyses for proposed changes, represent security on the Change Control Board (CCB), and lead threat modeling sessions for new systems, features, and infrastructure changes.
Incident Management & Operations: Triage and document security incidents within OneTrust and Jira. Collaborate with DevOps to ensure security tools are properly deployed across AWS environments and endpoint configurations.
Endpoint & Tool Oversight: Maintain a "read-only/audit" oversight of our endpoint detection, MDM, and email security tools (Sophos, JAMF, BetterCloud) to ensure compliance and active alerting.
Security Awareness & Culture: Administer the security awareness learning modules (RF Academy) and lead internal initiatives to keep security top-of-mind for all employees.
Citizenship: All candidates must be a US citizen.
Experience: 3–5 years of dedicated experience in a technical cybersecurity role (e.g., Security Engineer, AppSec Engineer, or Senior Security Analyst, etc.).
Application Security: Strong familiarity with the OWASP Top 10, web application security testing, and reviewing secure code dependencies (SCA).
Vulnerability Assessment: Proven experience running enterprise vulnerability scanners, interpreting results, and driving remediation across cross-functional teams.
Cloud & Infrastructure: Foundational knowledge of cloud environments (specifically AWS) and securing cloud-native applications.
Communication: Excellent collaboration skills. You must be able to sit down with software developers, understand their sprint goals, and help them fix security bugs without breaking their workflow.
Direct experience with our specific stack is a massive plus:
AppSec/PenTesting: Burp Suite, Kali Linux, BugCrowd, Sonarqube
SecOps & Vulnerability: Tenable, Bitsight, OneTrust
IT & Endpoint Ecosystem: Jira, AWS, Sophos, JAMF, PDQ, BetterCloud
Certifications: CompTIA Security+, CEH, GIAC, or progress toward a CISSP, or other relevant certifications
Automation: Basic scripting skills (Python, PowerShell, or Bash) to automate repetitive security tasks or log analysis.
Security Frameworks: Experience with maintaining compliance with PCI-DSS, ISO 27001, and SOC 2 frameworks.
Artificial Intelligence: Experience utilizing AI to improve productivity and efficiency, as well as experience reviewing AI tools, integrations, and features.
Proactive Remediation: Decreased time-to-remediation for vulnerabilities identified by Tenable and BugCrowd.
Seamless Dev Integration: Active, constructive participation in developer sprint/architecture cycles, resulting in fewer security defects reaching production.
Incident Readiness: Efficient tracking, documentation, and resolution of incidents within OneTrust
We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.
Sourced by ZipRecruiter
Software development
11 - 50 Employees
Lehi, UT, US
2013