Beltsville, MD · On-site
$60 - $70/hr
Network & Web Application Testing: * Ability to identify and exploit vulnerabilities in networks ... GPEN (GIAC Penetration Tester) * CPT (Certified Penetration Tester) Soft Skills * Strong report ...
Beltsville, MD · On-site
$60 - $70/hr
Network & Web Application Testing: * Ability to identify and exploit vulnerabilities in networks ... GPEN (GIAC Penetration Tester) * CPT (Certified Penetration Tester) Soft Skills * Strong report ...
Arlington, VA · On-site
$86K - $138K/yr
Responsibilities Peraton is seeking an experienced Cyber Penetration Tester to become part of ... Common web application vulnerabilities and exploits such as XSS, SQLi, LFI, file uploads, broken ...
Arlington, VA · On-site
$86K - $138K/yr
Responsibilities Peraton is seeking an experienced Cyber Penetration Tester to become part of ... Common web application vulnerabilities and exploits such as XSS, SQLi, LFI, file uploads, broken ...
$90K - $130K/yr
CDT is looking for a Penetration Tester to This will be supporting a government customer onsite in ... System methodologies including: client/server, web hosting, web content servers, policy servers ...
Quick apply
$90K - $130K/yr
CDT is looking for a Penetration Tester to This will be supporting a government customer onsite in ... System methodologies including: client/server, web hosting, web content servers, policy servers ...
Gaithersburg, MD · Remote
Web Application Testing: * Conduct security assessments of agency web applications using OWASP Top ... Penetration Testing & Exploitation Validation: * Perform controlled penetration testing (internal ...
New
Gaithersburg, MD · Remote
Web Application Testing: * Conduct security assessments of agency web applications using OWASP Top ... Penetration Testing & Exploitation Validation: * Perform controlled penetration testing (internal ...
New
Quantico, VA · Hybrid
Proven experience conducting penetration tests of web applications, networks, and other systems. * Experience with a variety of penetration testing tools and techniques (e.g., Rapid7 Nexpose ...
Quantico, VA · Hybrid
Proven experience conducting penetration tests of web applications, networks, and other systems. * Experience with a variety of penetration testing tools and techniques (e.g., Rapid7 Nexpose ...
Reston, VA · On-site
Penetration Tester Location: Reston, VA Work Mode - Hybrid role, 2 days' Work from Office ... Experience conducting web application security assessments * Experience working with a range of ...
Reston, VA · On-site
Penetration Tester Location: Reston, VA Work Mode - Hybrid role, 2 days' Work from Office ... Experience conducting web application security assessments * Experience working with a range of ...
Herndon, VA · On-site
$120 - $150/hr
* Perform penetration testing on networks, applications (including APIs, mobile apps, and web apps) * Utilize social engineering techniques * Provide mentoring to junior staff * Support Red Team ...
Herndon, VA · On-site
$120 - $150/hr
* Perform penetration testing on networks, applications (including APIs, mobile apps, and web apps) * Utilize social engineering techniques * Provide mentoring to junior staff * Support Red Team ...
Gaithersburg, MD · On-site
$100K - $130K/yr
Web Application Testing: * Conduct security assessments of agency web applications using OWASP Top ... Penetration Testing & Exploitation Validation: * Perform controlled penetration testing (internal ...
New
Gaithersburg, MD · On-site
$100K - $130K/yr
Web Application Testing: * Conduct security assessments of agency web applications using OWASP Top ... Penetration Testing & Exploitation Validation: * Perform controlled penetration testing (internal ...
New
Gaithersburg, MD · On-site
$100K - $130K/yr
Web Application Testing: Conduct security assessments of agency web applications using OWASP Top 10 ... Penetration Testing & Exploitation Validation: Perform controlled penetration testing (internal and ...
New
Quick apply
Gaithersburg, MD · On-site
$100K - $130K/yr
Web Application Testing: Conduct security assessments of agency web applications using OWASP Top 10 ... Penetration Testing & Exploitation Validation: Perform controlled penetration testing (internal and ...
New
Chantilly, VA · On-site
... Penetration Tester to perform computer network evaluations and penetration security assessments ... common web application vulnerabilities like XSS, CSRF, Command Injection, SQLi, single sign-on ...
Chantilly, VA · On-site
... Penetration Tester to perform computer network evaluations and penetration security assessments ... common web application vulnerabilities like XSS, CSRF, Command Injection, SQLi, single sign-on ...
Albany, NY · On-site
$60/hr
Proficiency in web application security principles (e.g., OWASP). * Knowledge of common web vulnerabilities (e.g., SQL injection, XSS) and exploit techniques. * Experience with penetration testing ...
Quick apply
Albany, NY · On-site
$60/hr
Proficiency in web application security principles (e.g., OWASP). * Knowledge of common web vulnerabilities (e.g., SQL injection, XSS) and exploit techniques. * Experience with penetration testing ...
Chandler, AZ · On-site
The role involves conducting penetration testing, managing projects, and leading Red Team ... Company : M9 Solutions is a national staffing firm focused on cloud, cyber security, web ...
Chandler, AZ · On-site
The role involves conducting penetration testing, managing projects, and leading Red Team ... Company : M9 Solutions is a national staffing firm focused on cloud, cyber security, web ...
Plano, TX · Remote
$60 - $70/hr
Conduct internal/external penetration testing, web application, API, and cloud security assessments across AWS, Azure, and GCP environments. * Identify, exploit, document, and validate ...
Quick apply
Plano, TX · Remote
$60 - $70/hr
Conduct internal/external penetration testing, web application, API, and cloud security assessments across AWS, Azure, and GCP environments. * Identify, exploit, document, and validate ...
Washington, DC · On-site
They are seeking a Penetration Tester II to work on-site in support of a government contract ... Company : M9 Solutions is a national staffing firm focused on cloud, cyber security, web ...
Washington, DC · On-site
They are seeking a Penetration Tester II to work on-site in support of a government contract ... Company : M9 Solutions is a national staffing firm focused on cloud, cyber security, web ...
Springfield, VA · On-site
$100K - $140K/yr
GIAC Web Application Penetration Tester (GWAP) Company Description Total Cyber Solutions is a premier provider of Government Contracting, managed IT Services, and Cybersecurity Training. We help ...
Quick apply
Springfield, VA · On-site
$100K - $140K/yr
GIAC Web Application Penetration Tester (GWAP) Company Description Total Cyber Solutions is a premier provider of Government Contracting, managed IT Services, and Cybersecurity Training. We help ...
Washington, DC · On-site
$145K - $180K/yr
Senior Penetration Tester Pay Type : SALARIED EXEMPT Location : Hybrid, Washington, DC US ... Maintain advanced knowledge of networking, cryptography, reverse engineering, web applications ...
Quick apply
Washington, DC · On-site
$145K - $180K/yr
Senior Penetration Tester Pay Type : SALARIED EXEMPT Location : Hybrid, Washington, DC US ... Maintain advanced knowledge of networking, cryptography, reverse engineering, web applications ...
Washington, DC · On-site
$126K - $243K/yr
Penetration testing experience across at least two of the following domains: network, cloud, web application, identity, or containerized environments. * Experience operating within defined Rules of ...
Washington, DC · On-site
$126K - $243K/yr
Penetration testing experience across at least two of the following domains: network, cloud, web application, identity, or containerized environments. * Experience operating within defined Rules of ...
Washington, DC · On-site
Penetration testing experience across at least two of the following domains: network, cloud, web application, identity, or containerized environments. * Experience operating within defined Rules of ...
Washington, DC · On-site
Penetration testing experience across at least two of the following domains: network, cloud, web application, identity, or containerized environments. * Experience operating within defined Rules of ...
$110 - $150K/hr
Lead Penetration Tester Location: Washington, DC, Ft. Collins, CO, or Kansas City, MO (project ... Web application security assessments (approximately 3-4 applications per year) * Test plan and ...
Quick apply
$110 - $150K/hr
Lead Penetration Tester Location: Washington, DC, Ft. Collins, CO, or Kansas City, MO (project ... Web application security assessments (approximately 3-4 applications per year) * Test plan and ...
Chandler, AZ · On-site
They are seeking a Penetration Tester II to support a government contract and conduct various types ... Company : M9 Solutions is a national staffing firm focused on cloud, cyber security, web ...
Chandler, AZ · On-site
They are seeking a Penetration Tester II to support a government contract and conduct various types ... Company : M9 Solutions is a national staffing firm focused on cloud, cyber security, web ...
$22.5K - $35.8K
0% of jobs
$35.8K - $49K
0% of jobs
$49K - $62.3K
2% of jobs
$62.3K - $75.6K
3% of jobs
$75.6K - $88.9K
1% of jobs
$101.1K is the 25th percentile. Wages below this are outliers.
$88.9K - $102.1K
20% of jobs
$102.1K - $115.4K
14% of jobs
The median wage is $120.4K / yr.
$115.4K - $128.7K
26% of jobs
$138.1K is the 75th percentile. Wages above this are outliers.
$128.7K - $142K
13% of jobs
$142K - $155.2K
13% of jobs
$155.2K - $168.5K
9% of jobs
$22.5K
$119.9K
$168.5K
A Web Penetration Tester is a cybersecurity professional who evaluates the security of web applications by simulating cyberattacks. They identify vulnerabilities, exploit weaknesses, and provide recommendations to improve security. Their goal is to protect web systems from threats like SQL injection, cross-site scripting (XSS), and authentication flaws. This role requires expertise in ethical hacking, scripting, and security tools such as Burp Suite and OWASP ZAP.
To thrive as a Web Penetration Tester, you need a solid background in cybersecurity principles, web application architecture, and vulnerability assessment, often supported by a degree in computer science or a related field. Familiarity with tools like Burp Suite, OWASP ZAP, Metasploit, and relevant certifications such as OSCP or CEH are highly valued. Strong analytical thinking, effective communication, and meticulous attention to detail set candidates apart in this profession. These skills ensure that testers can identify critical security flaws while clearly conveying technical risks to both technical teams and non-technical stakeholders, effectively strengthening organizational cybersecurity.
Web Penetration Testers often face the challenge of keeping up with rapidly evolving web technologies and an ever-changing threat landscape. They must carefully balance thorough testing with tight project deadlines, ensuring their work uncovers both common and obscure security vulnerabilities. Collaborating with development and operations teams can require clear communication to explain findings and foster a security-oriented culture. The role can also involve continual learning and adapting to new tools, methodologies, and compliance requirements.
Sourced by ZipRecruiter
Recruiting and staffing services
5,001 - 10,000 Employees
Wayne, PA, US
1970
