ZipRecruiter

Log In

1

Security Penetration Testing Jobs (NOW HIRING)

Peraton

Penetration Tester

Arlington, VA · On-site

$86K - $138K/yr

In lieu of a degree, 4 years of additional IT security or penetration testing experience may be considered. * Minimum of 2 years with penetration testing experience. * Possess one of the following ...

SkyePoint Decisions

Penetration Tester

Arlington, VA

$95K - $112K/yr

In lieu of a degree, 4 years of additional IT security or penetration testing experience may be considered. * Minimum of 2 years with penetration testing experience. * Possess one of the following ...

Peraton

Penetration Tester

Arlington, VA · On-site

$86K - $138K/yr

In lieu of a degree, 4 years of additional IT security or penetration testing experience may be considered. * Minimum of 2 years with penetration testing experience. * Possess one of the following ...

Peraton

Penetration Tester

Arlington, VA · On-site

$86K - $138K/yr

In lieu of a degree, 4 years of additional IT security or penetration testing experience may be considered. * Minimum of 2 years with penetration testing experience. * Possess one of the following ...

Goldbelt, Inc.

Senior Penetration Tester

$90K - $150K/yr

Performs application and network penetration testing and wireless security assessments. * Applies offensive cybersecurity testing techniques, coordinate testing projects with internal and external ...

gTANGIBLE

Penetration Testing Team Lead

Arlington, VA · On-site

National Security Programs * Professional, Administrative, and Management Support * Mission and ... Penetration Testing Team Lead Location: National Capital Region Clearance: Secret Duties and ...

gTANGIBLE

Penetration Testing Team Lead

Arlington, VA · On-site

National Security Programs * Professional, Administrative, and Management Support * Mission and ... Penetration Testing Team Lead Location: Arlington, VA Clearance: Secret Duties and Responsibilities ...

Orison

Penetration Tester

Reston, VA · On-site

Network penetration testing and experience working with network infrastructure * An understanding ... Experience with security assessment tools, such as Nessus, Metasploit, Burp Suite Pro, Cobalt ...

SOSi

Penetration Tester III

Washington, DC · On-site

This role is responsible for conducting penetration testing and red team activities, assessing security posture across enterprise environments, and supporting identification, validation, and ...

next page

Showing results 1-20

All JobsSecurity Penetration Testing Jobs

Security Penetration Testing information

See salary details

$61.5K

$152.8K

$205.5K

How much do security penetration testing jobs pay per year?

As of Jul 13, 2026, the average yearly pay for security penetration testing in the United States is $152,773.00, according to ZipRecruiter salary data. Most workers in this role earn between $143,000.00 and $158,500.00 per year, depending on experience, location, and employer.

What are the key skills and qualifications needed to thrive as a Security Penetration Tester, and why are they important?

To thrive as a Security Penetration Tester, you need a solid understanding of network security, operating systems, and ethical hacking, usually supported by a degree in computer science or a related field. Familiarity with tools like Metasploit, Burp Suite, and certifications such as OSCP or CEH are commonly required. Strong analytical thinking, attention to detail, and effective communication skills set standout professionals apart in this role. These skills and qualifications are vital for identifying vulnerabilities, communicating risks, and helping organizations strengthen their security posture.

What is security penetration testing?

Security penetration testing, also known as pen testing, is a simulated cyberattack conducted on a computer system, network, or web application to identify vulnerabilities that could be exploited by hackers. The goal is to proactively find security weaknesses before malicious actors do, helping organizations strengthen their defenses. Penetration testers use a combination of automated tools and manual techniques to mimic real-world attack scenarios. The results are documented in a report, which includes recommendations for improving security.

What is the difference between Security Penetration Testing vs Security Analyst?

AspectSecurity Penetration TestingSecurity Analyst
CertificationsOSCP, CEH, GPENCISSP, Security+
Work EnvironmentProject-based, technical testingMonitoring, incident response
Primary FocusIdentifying vulnerabilities through simulated attacksMonitoring security systems and analyzing threats
Employer & Industry UsageCybersecurity firms, IT departmentsCorporate, government, finance sectors

While both roles focus on cybersecurity, Security Penetration Testing involves actively probing systems for vulnerabilities through simulated attacks, whereas Security Analysts monitor and analyze security threats to protect organizational assets. Both roles require relevant certifications and are essential for comprehensive cybersecurity defense.

What is a penetration tester in security?

A penetration tester, also known as an ethical hacker, is a cybersecurity professional who simulates cyberattacks to identify vulnerabilities in computer systems, networks, and applications. They use tools like vulnerability scanners and follow structured testing methodologies, often holding certifications such as OSCP or CEH, to help organizations improve their security defenses.

Is penetration testing a good career?

Penetration testing is a valuable cybersecurity role that involves identifying vulnerabilities in systems and networks. It offers high demand, competitive salaries, and opportunities for certification such as OSCP or CEH, making it a strong career choice for those interested in cybersecurity and ethical hacking.

Can you make $500,000 a year in cyber security?

Security penetration testers with extensive experience, advanced certifications, and specialized skills can potentially earn $500,000 or more annually, especially in senior or consulting roles. Achieving this level often requires a combination of technical expertise, leadership, and working in high-demand environments or for large organizations. Most professionals in the field earn lower salaries, but top-tier experts can reach or exceed this income level.

What jobs can I get with a security+ certification?

A Security+ certification qualifies you for roles such as security analyst, cybersecurity technician, or network security administrator. These positions involve assessing vulnerabilities, implementing security measures, and monitoring networks using tools like firewalls and intrusion detection systems. The certification demonstrates foundational knowledge in cybersecurity principles and best practices.

What are some common challenges Security Penetration Testers face when conducting assessments in large organizations?

Security Penetration Testers often encounter challenges such as navigating complex network environments, obtaining the necessary permissions to test sensitive systems, and coordinating with multiple stakeholders to minimize business disruptions. Additionally, they must stay updated with evolving security threats and technologies to ensure their testing methods remain effective. Effective communication and clear reporting are also crucial, as conveying findings to both technical and non-technical audiences can directly impact remediation efforts and overall security posture.
More about Security Penetration Testing jobs
What cities are hiring for Security Penetration Testing jobs? Cities with the most Security Penetration Testing job openings:
What states have the most Security Penetration Testing jobs? States with the most job openings for Security Penetration Testing jobs include:
What job categories do people searching Security Penetration Testing jobs look for? The top searched job categories for Security Penetration Testing jobs are:
Security Penetration Testing jobs near you
Infographic showing various Security Penetration Testing job openings in the United States as of July 2026, with employment types broken down into 96% Full Time, 2% Part Time, and 2% Contract. Highlights an 83% Physical, 2% Hybrid, and 15% Remote job distribution, with an average salary of $152,773 per year, or $73.4 per hour.
Penetration Tester

Penetration Tester

Cyber Defense Technologies

Chantilly, VA • On-site

$90K - $130K/yr

Full-time

Medical, Dental, Retirement

Re-posted 12 days ago

Job description

Overview: CDT is looking for a Penetration Tester to This will be supporting a government customer onsite in Chantilly, VA. Candidates with OSCP certification are highly recommended to apply.
Clearance: An active Top Secret/SCI with CI poly is required.Candidates who do not meet these requirements will not be considered.
Responsibilities:
  • Conduct penetration testing that uses both active and passive capabilities to expose and exploit IA vulnerabilities.
  • Review and evaluate information systems and recommend changes to the Government that can improve information confidentiality, integrity and availability.
  • Responsible for performing security focused services to improve security posture.
  • Conduct test and evaluations of software, hardware, networks and applications.
  • Reviews of the documents to ensure completeness and compliance with the RMF process, ICD 503 requirements, and/or other applicable regulations.
Qualifications:
  • High School Diploma/GED, Associates Degree and 5 years of relevant work experience.
  • Bachelor's Degree and 3 years of relevant work experience.
  • Experience in cyber security with a focus on red teaming, penetration testing, or threat hunting.
Desired Qualifications:
  • Strong understanding of network protocols and troubleshooting, server and workstation operating systems, exploits and vulnerabilities.
  • Strong working knowledge of common penetration tools, tactics, techniques, and procedures.
  • Experience with cloud environments.
  • Strong understanding of penetration testing methodologies (MITRE ATT&CK, OWASP).
  • Ability to incorporate threat intelligence data into attached or penetration testing scenarios.
  • Excellent problem solving and troubleshooting skills with a strong attention to detail.
  • Ability to read/write code using interpreted languages (Python, PHP, Ruby, etc.).
  • Experience with simulated/emulated environments and/or virtualization technologies.
  • Experience with orchestration tools and virtualization environments (Docker, Kubernetes, etc.).
  • Experience with industrial control systems deployment, security best practices, vulnerabilities, and penetration testing.
  • ICD 503 and the Government's certification and accreditation process.
  • Networks, computer components, system protocols, and COTS technology.
  • System methodologies including: client/server, web hosting, web content servers, policy servers, directory servers, firewalls, WAN, MAN, LAN, switches, and routers.
  • Software integration of COTS and Government Off-the-Shelf (GOTS) products.
  • Windows, Linux, Unix, and Mac OS X administration.
  • VMware, Xen, Hyper V and other virtualization platforms.
  • Configuring and supporting Windows, Linux, Unix, Mac OS, and other operating systems, VMware, Xen, Hyper V and other virtualization platforms.
  • Experience in Software engineering, program design and implementation, configuration management, system maintenance, integration testing, Information system engineering.
  • System certification activities and efforts related to system certification and accreditation.
  • Research, develop, and maintain knowledge of penetration testing tools, tactics, techniques, and procedures.
  • Research, development, integration, and distribution of information systems security tools and associated documentation
  • Security procedures for systems and software within area of expertise to ensure consistent security policy implementation.
  • Experience in technical project management.
  • Education relevant to computer engineering, information security, information management, cyber security, and/or computer science

Why Join Cyber Defense Technologies?
At CDT, we offer a collaborative and inclusive work environment where your expertise in Penetration Testing will help shape the future of cybersecurity and engineering solutions.
Compensation and Benefits:
  • Competitive salary based on experience.
  • Comprehensive benefits package, including health, dental, and retirement plans.
  • Opportunities for professional development and career advancement.

CDT is committed to hiring and retaining a diverse workforce. We are an Equal Opportunity employer making decisions without regard to race, color, religion, creed, sex, sexual orientation, gender identity, marital status, national origin, age, veteran status, disability, or any other protected class.
Apply Now:
If you are a proactive Penetration Tester and thrive in dynamic environments, we encourage you to apply and join the CDT team!
Salary Range: $90,000 - $130,000

Apply