ZipRecruiter

Log In

2

Remote Mobile Penetration Tester Jobs (NOW HIRING)

BreachLock

Senior Penetration Tester (US)

Role Description Penetration Tester (Mid-Senior) Full-Time Remote (US) As a penetration tester on ... Execute web application, API and mobile penetration tests with a focus on manual testing beyond ...

Booz Allen Hamilton, Inc.

Penetration Tester

Herndon, VA · On-site +1

$86K - $198K/yr

Remote Work: No Job Number: R0236401 Location: Herndon,VA,US Share job via: Share Penetration Tester The Opportunity: Conduct testing and analysis to identify vulnerabilities and potential threat ...

Business Centric Technology

Penetration Tester

Plano, TX · Remote

$60 - $70/hr

This is a remote, 6+ month contract-to-hire position. COMP : Up to $70/HR depending on candidate ... Conduct internal/external penetration testing, web application, API, and cloud security assessments ...

Zelvin Security LLC

Be Seen First

Penetration Tester

Knoxville, TN · Remote

$120K - $145K/yr

What We Offer · Remote work environment · Unlimited paid time off (Policy Guided) · Continuing ... Our experienced Ethical Hacking testers perform penetration tests: application, mobile, cloud ...

Zelvin Security LLC

Be Seen First

Penetration Tester

Knoxville, TN · Remote

$120K - $145K/yr

What We Offer · Remote work environment · Unlimited paid time off (Policy Guided) · Continuing ... Our experienced Ethical Hacking testers perform penetration tests: application, mobile, cloud ...

OSec

Penetration Tester

New York, NY · On-site +1

The Penetration Tester is responsible for working as part of the Assessment Team to conduct and ... Skilled in conducting penetration tests for API, Mobile, Cloud, and Web Applications. * Familiarity ...

Bishop Fox

Penetration Tester - Contract

Contract Penetration Tester At Bishop Fox, security isn't just a job-it's our passion. As leaders ... Mobile Application Security - Experience testing iOS and/or Android applications, including mobile ...

OSec

Penetration Tester (Remote)

New York, NY · Remote

The Penetration Tester is responsible for working as part of the Assessment Team to conduct and ... Skilled in conducting penetration tests for API, Mobile, Cloud, and Web Applications. * Familiarity ...

OSEC

Penetration Tester

New York, NY · On-site +1

The Penetration Tester is responsible for working as part of the Assessment Team to conduct and ... Skilled in conducting penetration tests for API, Mobile, Cloud, and Web Applications. * Familiarity ...

Bishop Fox

Penetration Tester - Contract

OR · On-site +1

Contract Penetration Tester At Bishop Fox, securityisn'tjust a job-it'sour passion. As leaders in ... Mobile Application Security - Experience testing iOS and/or Android applications, including mobile ...

OSec

Penetration Tester

They are seeking a Penetration Tester to conduct security audits, penetration tests, and provide ... for API, Mobile, Cloud, and Web Applications. • Familiarity with scripting languages such as ...

Bishop Fox

Penetration Tester

As leaders in continuous offensive security and penetration testing, we deliver world-class ... Cloud Security Assessments, Mobile Application Security Testing, Hybrid Application Assessments, or ...

next page

Showing results 1-20

All Jobsremote JobsTechnology JobsSoftware JobsSoftware Quality Engineer JobsRemote Mobile Penetration Tester Jobs

Remote Mobile Penetration Tester information

See salary details

$22.5K

$119.9K

$168.5K

How much do remote mobile penetration tester jobs pay per year?

As of Aug 17, 2026, the average yearly pay for remote mobile penetration tester in the United States is $119,895.00, according to ZipRecruiter salary data. Most workers in this role earn between $96,000.00 and $141,000.00 per year, depending on experience, location, and employer.

What is a remote mobile penetration tester?

A Remote Mobile Penetration Tester is a cybersecurity professional who evaluates the security of mobile applications and devices from a remote location. Their primary responsibility is to identify vulnerabilities, exploit security weaknesses, and provide recommendations to improve mobile app security. They use specialized tools and techniques to simulate cyberattacks, ensuring that mobile apps and systems are protected against real-world threats. These testers often collaborate with development teams to remediate issues and enhance the overall security posture of mobile platforms.

What are the key skills and qualifications needed to thrive as a remote mobile penetration tester?

To thrive as a Remote Mobile Penetration Tester, you need deep knowledge of mobile operating systems, application security, and vulnerability assessment, typically backed by experience in cybersecurity and relevant certifications such as OSCP or GMOB. Proficiency with tools like Burp Suite, MobSF, Frida, and various scripting languages is essential for effective testing and reporting. Strong analytical thinking, clear communication, and self-motivation help testers collaborate remotely and convey complex findings to stakeholders. These skills are crucial for identifying security flaws, ensuring robust mobile app defenses, and successfully delivering results in a distributed work environment.

How does a remote mobile penetration tester typically collaborate with development teams during security assessments?

Remote Mobile Penetration Testers often work closely with development teams to identify, communicate, and help remediate security vulnerabilities in mobile applications. Collaboration usually involves regular virtual meetings, detailed written reports, and walkthroughs of findings to ensure developers understand the risks and recommended fixes. Effective teamwork and clear communication are essential, as testers may need to clarify technical details or demonstrate exploits in remote settings. This collaborative process not only strengthens application security but also builds trust and knowledge-sharing between security and development teams.

What is the difference between Remote Mobile Penetration Tester vs Remote Network Security Analyst?

AspectRemote Mobile Penetration Tester
Primary FocusTesting mobile applications and devices for security vulnerabilities
CertificationsCEH, OSCP, CISSP (preferred)
Work EnvironmentRemote, often collaborating with development teams
Industry UsageTech, finance, healthcare sectors with mobile app security needs

While both roles focus on cybersecurity, a Remote Mobile Penetration Tester specializes in assessing mobile app and device security, whereas a Remote Network Security Analyst concentrates on protecting entire network infrastructures. The former emphasizes mobile-specific vulnerabilities, while the latter covers broader network defenses. Both roles require similar certifications and often work remotely within tech-driven industries.

More about Remote Mobile Penetration Tester jobs

What cities are hiring for Remote Mobile Penetration Tester jobs?

Cities with the most Remote Mobile Penetration Tester job openings:

What are the most commonly searched types of Remote Penetration Tester jobs?

The most popular types of Remote Penetration Tester jobs are:

What states have the most Remote Mobile Penetration Tester jobs?

States with the most job openings for Remote Mobile Penetration Tester jobs include:

What job categories do people searching Remote Mobile Penetration Tester jobs look for?

The top searched job categories for Remote Mobile Penetration Tester jobs are:

Remote Mobile Penetration Tester jobs near you
Infographic showing various Remote Mobile Penetration Tester job openings in the United States as of August 2026, with employment types broken down into 44% Full Time, and 56% Part Time. Highlights an 100% Remote job distribution, with an average salary of $119,895 per year, or $57.6 per hour.

Senior Penetration Tester (US)

BreachLock

Remote

Full-time

Re-posted 25 days ago

Job description

Company Description
BreachLock is a global leader in Offensive Security including Red Teaming, Continuous Attack Surface Discovery and Penetration Testing services. We help organizations discover, prioritize, and mitigate exposures with evidence-backed Attack Surface Management, Penetration Testing, and Red Teaming. BreachLock provides an attacker's perspective that goes beyond standard vulnerabilities, enabling organizations to build a comprehensive, proactive defense strategy.
Role Description
Penetration Tester (Mid-Senior) Full-Time Remote (US)
As a penetration tester on BreachLock's US Strategic delivery team, you'll execute manual, methodology-driven engagements across web applications, APIs, and internal networks - including assumed breach simulations - for enterprise clients. You'll work directly with delivery leadership, contribute to internal tooling and quality systems, and help raise the bar for the team around you.
Key Responsibilities
  • Execute web application, API and mobile penetration tests with a focus on manual testing beyond automated scanning - business logic, authentication abuse, authorization flaws, and injection chains
  • Conduct internal network assessments, external network assessments and assumed breach engagements, including Active Directory enumeration, lateral movement, privilege escalation, and post-exploitation
  • Leverage frameworks including MITRE ATT&CK, PTES, and OWASP to structure assessments and findings
  • Develop and contribute to internal tooling - automation scripts, reporting utilities, and workflow improvements using Python, Bash, or similar
  • Participate in QA review cycles, providing structured feedback on findings, CVSS scoring accuracy, and report quality
  • Mentor junior testers through technical guidance and finding review
  • Collaborate with delivery leadership on scoping, client kickoff calls, and remediation guidance

Requirements
  • 3-5 years of professional penetration testing experience in a delivery or consulting context
  • Strong web application and API testing fundamentals - Burp Suite proficiency, OWASP Top 10 and beyond, authentication and session management testing
  • Solid internal network assessment skills - AD enumeration, Kerberoasting, NTLM relay, ADCS misconfigurations, assumed breach methodology
  • Proficiency in scripting and automation (Python, PowerShell, Bash)
  • Strong written communication - capable of writing clear, accurate, well-scoped findings independently
  • Familiarity with PTaaS delivery models or platform-based reporting workflows is a plus
  • US-based and eligible to work without sponsorship

Preferred
  • Experience with C2 frameworks (Cobalt Strike, Havoc, Sliver, or similar)
  • Active involvement in cybersecurity communities, research, or bug bounty programs
  • Certifications such as OSCP, BSCP, CRTO, GWAPT, GPEN, or equivalent practical credentials
  • Experience with SIEM platforms or EDR tools from an adversarial perspective

Benefits
  • Competitive compensation and performance-based equity opportunities
  • Flexible work hours with hybrid remote options
  • Opportunity to work with international cybersecurity experts
  • Strong career progression in a rapidly expanding early-stage company
  • Exposure to cutting-edge research, tools, and techniques in offensive security

Additional Organization Details
  • BreachLock Website
  • Leadership Team
  • Meet the BreachLockers Video Series
  • Reuters Coverage
  • CEO Interview - Cybercrime Magazine
  • Seemant Sehgal Interview on RT4 & RTLZ

Apply