Remote Duration: 12 Months Important Notes: * Location: Remote - anywhere in the US and need to ... Conduct regular vulnerability scans, penetration testing coordination, and security posture reviews.
Quick apply
Remote Duration: 12 Months Important Notes: * Location: Remote - anywhere in the US and need to ... Conduct regular vulnerability scans, penetration testing coordination, and security posture reviews.
Spring & Summer 2027 Intern - Security & GRC
Durham, NC · On-site +1
$40/hr
Familiarity with vulnerability scanning tools and/or penetration testing techniques * Familiarity ... This internship is primarily a remote opportunity. However, if you are located near one of our ...
Spring & Summer 2027 Intern - Security & GRC
Durham, NC · On-site +1
$40/hr
Familiarity with vulnerability scanning tools and/or penetration testing techniques * Familiarity ... This internship is primarily a remote opportunity. However, if you are located near one of our ...
Spring & Summer 2027 Intern - Security & GRC
Raleigh, NC · On-site +1
$40/hr
Familiarity with vulnerability scanning tools and/or penetration testing techniques * Familiarity ... This internship is primarily a remote opportunity. However, if you are located near one of our ...
Spring & Summer 2027 Intern - Security & GRC
Raleigh, NC · On-site +1
$40/hr
Familiarity with vulnerability scanning tools and/or penetration testing techniques * Familiarity ... This internship is primarily a remote opportunity. However, if you are located near one of our ...
Remote Penetration Testing information
See Raleigh, NC salary details
$21.9K - $34.8K
0% of jobs
$34.8K - $47.7K
0% of jobs
$47.7K - $60.6K
2% of jobs
$60.6K - $73.5K
3% of jobs
$73.5K - $86.4K
1% of jobs
$98.3K is the 25th percentile. Wages below this are outliers.
$86.4K - $99.3K
20% of jobs
$99.3K - $112.2K
14% of jobs
The median wage is $117K / yr.
$112.2K - $125.1K
26% of jobs
$134.2K is the 75th percentile. Wages above this are outliers.
$125.1K - $138K
13% of jobs
$138K - $150.9K
13% of jobs
$150.9K - $163.8K
9% of jobs
$21.9K
$116.5K
$163.8K
How much do remote penetration testing jobs pay per year?
As of Sep 6, 2026, the average yearly pay for remote penetration testing in Raleigh, NC is $116,547.00, according to ZipRecruiter salary data. Most workers in this role earn between $93,300.00 and $137,100.00 per year, depending on experience, location, and employer.
What is remote penetration testing?
Remote penetration testing is a security assessment process where cybersecurity professionals, also known as ethical hackers, attempt to find and exploit vulnerabilities in an organization’s systems, networks, or applications from an offsite location. This simulates a real-world cyberattack to help organizations identify and fix security weaknesses before malicious actors can exploit them. Remote penetration testing is often conducted over the internet, making it a flexible and efficient option for businesses to assess their security posture without requiring onsite visits.
What are the key skills and qualifications needed to thrive as a remote penetration tester?
To thrive as a Remote Penetration Tester, you need a solid understanding of computer networks, cybersecurity principles, and common vulnerabilities, often supported by a degree in computer science or related certifications like OSCP or CEH. Familiarity with penetration testing tools such as Metasploit, Burp Suite, Nmap, and various operating systems is essential. Strong analytical thinking, attention to detail, and clear written communication skills help you effectively discover, document, and explain security findings to clients. These competencies are crucial for accurately identifying risks and helping organizations strengthen their security posture.
What are some common challenges faced by remote penetration testers, and how can they be addressed?
Remote penetration testers often encounter challenges such as limited access to physical infrastructure, varying levels of client preparedness, and potential communication barriers with on-site teams. To address these issues, it's important to establish clear communication channels, use secure remote access tools, and maintain detailed documentation of testing activities. Building strong relationships with client IT staff and staying up-to-date with remote testing best practices can also help ensure effective and successful engagements.
What is the difference between Remote Penetration Testing vs Vulnerability Assessment Specialist?
| Aspect | Remote Penetration Testing | Vulnerability Assessment Specialist |
|---|---|---|
| Certifications | OSCP, CEH, GPEN | OSCP, CEH, CISSP |
| Work Environment | Hands-on testing, simulated attacks | Scanning, identifying vulnerabilities |
| Industry Usage | Cybersecurity firms, IT departments | Security teams, consulting firms |
Remote Penetration Testing involves actively exploiting vulnerabilities to assess security defenses, while Vulnerability Assessment Specialists focus on identifying and prioritizing security weaknesses without exploiting them. Both roles require similar certifications and often work in overlapping environments, but penetration testers perform more in-depth, simulated attack scenarios to evaluate security robustness.
What are the most commonly searched types of Penetration Testing jobs in Raleigh, NC?
The most popular types of Penetration Testing jobs in Raleigh, NC are:
What are popular job titles related to Remote Penetration Testing jobs in Raleigh, NC?
For Remote Penetration Testing jobs in Raleigh, NC, the most frequently searched job titles are:
What job categories do people searching Remote Penetration Testing jobs in Raleigh, NC look for?
The top searched job categories for Remote Penetration Testing jobs in Raleigh, NC are:
Contractor
Re-posted 6 days ago
Job description
AWS Security Engineer (DevSecOps)
Location: Remote
Duration: 12 Months
Location: Remote
Duration: 12 Months
Important Notes:
* Location: Remote – anywhere in the US and need to support during EST/CST hours.
* Early submissions will receive priority consideration.
* Location: Remote – anywhere in the US and need to support during EST/CST hours.
* Early submissions will receive priority consideration.
Key Responsibilities:
* Design and implement secure AWS architectures following the AWS Well-Architected Framework (Security Pillar).
* Manage and govern IAM, SSO, KMS, CloudTrail, Config, and Security Hub.
* Design and implement secure AWS architectures following the AWS Well-Architected Framework (Security Pillar).
* Manage and govern IAM, SSO, KMS, CloudTrail, Config, and Security Hub.
Configure & Maintain AWS Native Security Services:
* GuardDuty, Macie, Inspector, Detective, WAF, Shield, and Firewall Manager.
* Build automated security policies and compliance frameworks (CIS, NIST, ISO 27001, PCI DSS).
* Implement encryption at rest and in transit, enforce TLS, and key rotation via KMS.
* Develop and run incident detection, alerting, and response workflows using EventBridge, Lambda, and SNS.
* Integrate AWS Security Hub and GuardDuty findings into SIEM platforms (Splunk, Elastic, etc.).
* GuardDuty, Macie, Inspector, Detective, WAF, Shield, and Firewall Manager.
* Build automated security policies and compliance frameworks (CIS, NIST, ISO 27001, PCI DSS).
* Implement encryption at rest and in transit, enforce TLS, and key rotation via KMS.
* Develop and run incident detection, alerting, and response workflows using EventBridge, Lambda, and SNS.
* Integrate AWS Security Hub and GuardDuty findings into SIEM platforms (Splunk, Elastic, etc.).
Systems & Infrastructure Engineering:
* Manage and secure Linux/Windows systems running on EC2, EKS, and ECS.
* Build, automate, and maintain infrastructure with Terraform, CloudFormation, or AWS CDK.
* Configure VPCs, subnets, NAT gateways, Transit Gateway, and PrivateLink for secure network segmentation.
* Implement system patching, configuration management, and OS-level hardening (CIS benchmarks).
* Design and manage backups, disaster recovery, and multi-region high availability setups.
* Automate system monitoring, logging, and remediation with CloudWatch, SSM, and Config Rules.
* Manage and secure Linux/Windows systems running on EC2, EKS, and ECS.
* Build, automate, and maintain infrastructure with Terraform, CloudFormation, or AWS CDK.
* Configure VPCs, subnets, NAT gateways, Transit Gateway, and PrivateLink for secure network segmentation.
* Implement system patching, configuration management, and OS-level hardening (CIS benchmarks).
* Design and manage backups, disaster recovery, and multi-region high availability setups.
* Automate system monitoring, logging, and remediation with CloudWatch, SSM, and Config Rules.
DevSecOps:
* Integrate security scanning and compliance checks into CI/CD pipelines (GitHub Actions, Jenkins, CodePipeline).
* Automate vulnerability management (ECR image scanning, Inspector, Trivy, or Twistlock).
* Develop infrastructure automation for identity provisioning, logging, and access control.
* Create reusable Terraform modules and templates for AWS accounts and VPCs.
* Implement infrastructure drift detection and self-healing automation.
Monitoring, Audit & Compliance:
* Implement centralized log aggregation with CloudWatch Logs, OpenSearch, or SIEM tools.
* Monitor security posture continuously via Security Hub, Config, and GuardDuty dashboards.
* Conduct regular vulnerability scans, penetration testing coordination, and security posture reviews.
* Manage audit readiness and evidence collection for compliance frameworks (SOC2, ISO27001, HIPAA).
* Develop runbooks and playbooks for incident response and operational processes.
Preferred Qualifications:
* AWS Certified Security – Specialty (strongly preferred).
* Experience with multi-account AWS Organizations, Control Tower, and Service Control Policies (SCPs).
* Knowledge of container security (EKS, ECS, Bottlerocket, Karpenter).
* Experience with SIEM/SOAR integrations and automated incident response.
* Exposure to Zero Trust and Network Segmentation design principles.
* Integrate security scanning and compliance checks into CI/CD pipelines (GitHub Actions, Jenkins, CodePipeline).
* Automate vulnerability management (ECR image scanning, Inspector, Trivy, or Twistlock).
* Develop infrastructure automation for identity provisioning, logging, and access control.
* Create reusable Terraform modules and templates for AWS accounts and VPCs.
* Implement infrastructure drift detection and self-healing automation.
Monitoring, Audit & Compliance:
* Implement centralized log aggregation with CloudWatch Logs, OpenSearch, or SIEM tools.
* Monitor security posture continuously via Security Hub, Config, and GuardDuty dashboards.
* Conduct regular vulnerability scans, penetration testing coordination, and security posture reviews.
* Manage audit readiness and evidence collection for compliance frameworks (SOC2, ISO27001, HIPAA).
* Develop runbooks and playbooks for incident response and operational processes.
Preferred Qualifications:
* AWS Certified Security – Specialty (strongly preferred).
* Experience with multi-account AWS Organizations, Control Tower, and Service Control Policies (SCPs).
* Knowledge of container security (EKS, ECS, Bottlerocket, Karpenter).
* Experience with SIEM/SOAR integrations and automated incident response.
* Exposure to Zero Trust and Network Segmentation design principles.