ZipRecruiter

Log In

2

Remote Penetration Testing Jobs (NOW HIRING)

Endyna

Penetration Testing - SME

Mclean, VA · Remote

Remote / Hybrid / Travel as Required Security Requirement: Must be eligible to obtain and maintain ... Lead penetration testing engagements * Develop attack strategies * Review Rules of Engagement

Philadelphia Comapny

Remote Penetration Tester

Atlanta, GA · On-site +1

Prefer consulting background. • A minimum of 2 years of penetration testing or ethical hacking either for a consultancy or a large enterprise. • Ability to synthesize and abstract complex data ...

BreachLock

Senior Penetration Tester (US)

Role Description Penetration Tester (Mid-Senior) Full-Time Remote (US) As a penetration tester on BreachLock's US Strategic delivery team, you'll execute manual, methodology-driven engagements across ...

Business Centric Technology

Penetration Tester

Plano, TX · Remote

$60 - $70/hr

This is a remote, 6+ month contract-to-hire position. COMP : Up to $70/HR depending on candidate ... Conduct internal/external penetration testing, web application, API, and cloud security assessments ...

Booz Allen Hamilton, Inc.

Penetration Tester

Herndon, VA · On-site +1

$86K - $198K/yr

Remote Work: No Job Number: R0236401 Location: Herndon,VA,US Share job via: Share Penetration Tester The Opportunity: Conduct testing and analysis to identify vulnerabilities and potential threat ...

next page

Showing results 1-20

All JobsPenetration Testing JobsRemote Penetration Testing Jobs

Remote Penetration Testing information

See salary details

$22.5K

$119.9K

$168.5K

How much do remote penetration testing jobs pay per year?

As of Jul 25, 2026, the average yearly pay for remote penetration testing in the United States is $119,895.00, according to ZipRecruiter salary data. Most workers in this role earn between $96,000.00 and $141,000.00 per year, depending on experience, location, and employer.

What are the key skills and qualifications needed to thrive as a Remote Penetration Tester, and why are they important?

To thrive as a Remote Penetration Tester, you need a solid understanding of computer networks, cybersecurity principles, and common vulnerabilities, often supported by a degree in computer science or related certifications like OSCP or CEH. Familiarity with penetration testing tools such as Metasploit, Burp Suite, Nmap, and various operating systems is essential. Strong analytical thinking, attention to detail, and clear written communication skills help you effectively discover, document, and explain security findings to clients. These competencies are crucial for accurately identifying risks and helping organizations strengthen their security posture.

Is there a demand for penetration testing?

There is strong demand for penetration testers, including those in remote roles, as organizations prioritize cybersecurity and vulnerability assessments. Skilled professionals with knowledge of tools like Kali Linux, Metasploit, and certifications such as OSCP are especially sought after in the industry.

Will pentesters be replaced by AI?

Remote penetration testers perform manual and creative security assessments that AI currently cannot fully replicate. While AI tools can assist with vulnerability scanning and data analysis, human expertise is essential for identifying complex threats, interpreting results, and developing effective security strategies. The role of pentesters is expected to evolve with technology, but not be entirely replaced by AI.

What is the difference between Remote Penetration Testing vs Vulnerability Assessment Specialist?

AspectRemote Penetration TestingVulnerability Assessment Specialist
CertificationsOSCP, CEH, GPENOSCP, CEH, CISSP
Work EnvironmentHands-on testing, simulated attacksScanning, identifying vulnerabilities
Industry UsageCybersecurity firms, IT departmentsSecurity teams, consulting firms

Remote Penetration Testing involves actively exploiting vulnerabilities to assess security defenses, while Vulnerability Assessment Specialists focus on identifying and prioritizing security weaknesses without exploiting them. Both roles require similar certifications and often work in overlapping environments, but penetration testers perform more in-depth, simulated attack scenarios to evaluate security robustness.

What are some common challenges faced by remote penetration testers, and how can they be addressed?

Remote penetration testers often encounter challenges such as limited access to physical infrastructure, varying levels of client preparedness, and potential communication barriers with on-site teams. To address these issues, it's important to establish clear communication channels, use secure remote access tools, and maintain detailed documentation of testing activities. Building strong relationships with client IT staff and staying up-to-date with remote testing best practices can also help ensure effective and successful engagements.

How much do remote penetration testers make?

Remote penetration testers typically earn between $70,000 and $130,000 annually, depending on experience, certifications, and the complexity of the projects. Senior professionals with advanced skills and certifications like OSCP or CISSP can earn higher salaries, especially when working for specialized firms or as freelancers.

Do penetration testers work remotely?

Many penetration testers work remotely, especially those in freelance or consulting roles, utilizing tools like VPNs, remote access software, and security testing platforms. Remote work allows flexibility, but some employers may require on-site presence for certain assessments or client interactions.

What is remote penetration testing?

Remote penetration testing is a security assessment process where cybersecurity professionals, also known as ethical hackers, attempt to find and exploit vulnerabilities in an organization’s systems, networks, or applications from an offsite location. This simulates a real-world cyberattack to help organizations identify and fix security weaknesses before malicious actors can exploit them. Remote penetration testing is often conducted over the internet, making it a flexible and efficient option for businesses to assess their security posture without requiring onsite visits.
More about Remote Penetration Testing jobs
What cities are hiring for Remote Penetration Testing jobs? Cities with the most Remote Penetration Testing job openings:
What are the most commonly searched types of Penetration Testing jobs? The most popular types of Penetration Testing jobs are:
What states have the most Remote Penetration Testing jobs? States with the most job openings for Remote Penetration Testing jobs include:
What job categories do people searching Remote Penetration Testing jobs look for? The top searched job categories for Remote Penetration Testing jobs are:
Remote Penetration Testing jobs near you
Infographic showing various Remote Penetration Testing job openings in the United States as of July 2026, with employment types broken down into 73% Full Time, 18% Part Time, and 9% Contract. Highlights an 100% Remote job distribution, with an average salary of $119,895 per year, or $57.6 per hour.
Penetration Testing - SME

Penetration Testing - SME

Endyna

Mclean, VA • Remote

Contractor

This job post has expired 1 day ago. Applications are no longer accepted.

Job description

Location: Remote / Hybrid / Travel as Required

Security Requirement:
Must be eligible to obtain and maintain an HHS Tier 4 High Risk Public Trust.

Position Summary

EnDyna is seeking a highly experienced Penetration Testing Subject Matter Expert (SME) to provide technical leadership supporting the HHS Office of Inspector General Cyber Assessment Team.

The SME will lead complex penetration testing engagements, provide technical consulting to Federal auditors, develop testing methodologies, mentor penetration testers, deliver cybersecurity training, and serve as a trusted advisor to Government leadership.

Primary Responsibilities

Technical Leadership

  • Lead penetration testing engagements
  • Develop attack strategies
  • Review Rules of Engagement
  • Provide technical oversight
  • Review testing methodologies
  • Ensure technical quality
  • Mentor penetration testers
  • Validate technical findings

Advanced Penetration Testing

Lead and perform:

  • Red Team operations
  • Advanced exploitation
  • Cloud security testing
  • AI security testing
  • Active Directory attacks
  • Wireless testing
  • Mobile security
  • Web application assessments
  • Social engineering assessments
  • Container security testing
  • Internal network assessments
  • External network assessments

Technical Consulting

Serve as cybersecurity advisor to OIG auditors by:

  • Providing technical guidance
  • Supporting complex audits
  • Evaluating security architectures
  • Reviewing vulnerability data
  • Advising on remediation strategies
  • Supporting Cyber Range activities

Reporting

Lead development of:

  • Executive briefings
  • OARS findings
  • Penetration test reports
  • Conclusions memoranda
  • Attack confirmation lists
  • Risk analyses
  • Technical recommendations

Training

Develop and deliver:

  • 4-5 day penetration testing courses
  • Hands-on laboratories
  • Live exploit demonstrations
  • Capstone exercises
  • Instructor coaching
  • Training materials
  • Student guides
  • Presentation slides

Technical Expertise

Demonstrated expertise in:

  • Offensive Security
  • Threat emulation
  • Adversary tactics
  • Cloud security
  • Active Directory
  • Application security
  • Network security
  • Secure development
  • Risk management
  • Federal cybersecurity

Minimum Qualifications

  • Bachelor's degree
  • Master's preferred
  • 10+ years of penetration testing experience
  • 5+ years leading technical teams
  • Experience supporting Federal agencies
  • Extensive report writing experience
  • Strong presentation skills

Highly Desired Certifications

One or more advanced certifications:

  • OSCE3
  • OSEP
  • OSEE
  • GXPN
  • GPEN
  • CISSP
  • GREM
  • CRTO
  • CARTP
  • CARTC

Preferred Experience

Experience with:

  • HHS
  • OIG
  • DHS
  • Federal Inspector General organizations
  • NIST SP 800-115
  • Federal auditing
  • Cyber Range environments
  • Offensive security consulting

Apply