ZipRecruiter

Log In

1

Web Penetration Tester Jobs (NOW HIRING)

TekSynap

Penetration Tester

Reston, VA

Knowledge of database, application, and web server design and implementation. * Experience with ... Overview We are seeking a Penetration Tester - Intermediate to join our Defense Logistics Agency ...

InterSources

Penetration Tester

Austin, TX

Security Testing, Web Application security, Penetration testing (At least one year experience) What We're Looking For * Analytical thinking, and motivated to learn new things. * Experience manually ...

Damco

Manual Penetration Tester

Alpharetta, GA

Responsibilities: * Perform advanced manual penetration testing of web applications, APIs, thick clients, mobile applications (iOS/Android), etc. * Identify, validate, and exploit security ...

M9 Solutions

Penetration Tester II

Chandler, AZ · On-site

They are seeking a Penetration Tester II to support a government contract and conduct various types ... Company : M9 Solutions is a national staffing firm focused on cloud, cyber security, web ...

Arctiq, Inc.

Penetration Tester

Brentwood, TN · On-site

Search for weaknesses in common software, web/mobile applications and proprietary systems ... Hold one or more current and relevant Penetration Testing certifications. * A solid foundational ...

M9 Solutions

Penetration Tester II

Washington, DC · On-site

They are seeking a Penetration Tester II to work on-site in support of a government contract ... Company : M9 Solutions is a national staffing firm focused on cloud, cyber security, web ...

Goldbelt, Inc.

Senior Penetration Tester

$90K - $150K/yr

Summary: The Senior Penetration Tester will independently perform penetration testing of ... Knowledge of databases, applications, and Web server design and implementation * Possess oral and ...

Navstar

Penetration Tester

Aberdeen Proving Ground, MD · Hybrid

$173K/yr

Strong grasp of networking, TCP/IP, virtualization, containerization, and web services * In-depth understanding of OWASP Top 10, DoD, NSA, or industry-standard Vulnerability and Penetration Testing ...

CACI International, Inc.

Penetration Tester

Aberdeen, MD · On-site

$173K/yr

Strong grasp of networking, TCP/IP, virtualization, containerization, and web services * In-depth understanding of OWASP Top 10, DoD, NSA, or industry-standard Vulnerability and Penetration Testing ...

Dark Wolf Solutions

Penetration Tester

Ogden, UT · On-site

Dark Wolf is looking for a Penetration Tester who will plan and perform continuous cross-domain ... Amazon Web Services, Microsoft Azure, Google Cloud Platform * Moderate competency in at least one ...

Arctiq, Inc.

Penetration Tester

Brentwood, TN · On-site

Search for weaknesses in common software, web/mobile applications and proprietary systems ... Hold one or more current and relevant Penetration Testing certifications. * A solid foundational ...

next page

Showing results 1-20

All JobsWeb Penetration Tester Jobs

Web Penetration Tester information

See salary details

$22.5K

$119.9K

$168.5K

How much do web penetration tester jobs pay per year?

As of Jun 13, 2026, the average yearly pay for web penetration tester in the United States is $119,895.00, according to ZipRecruiter salary data. Most workers in this role earn between $96,000.00 and $141,000.00 per year, depending on experience, location, and employer.

What is a web penetration tester?

A web penetration tester is a cybersecurity professional who evaluates the security of websites and web applications by simulating cyberattacks to identify vulnerabilities. They use tools like vulnerability scanners and follow ethical hacking practices, often holding certifications such as OSCP or CEH. Their goal is to help organizations strengthen their defenses against cyber threats.

Will pentesters be replaced by AI?

Web penetration testers perform manual and automated security assessments to identify vulnerabilities, and while AI tools can assist in detecting common issues, they cannot fully replace the critical thinking, creativity, and contextual understanding required for effective penetration testing. Human expertise remains essential for complex scenarios and interpreting results accurately.

What is a Web Penetration Tester job?

A Web Penetration Tester is a cybersecurity professional who evaluates the security of web applications by simulating cyberattacks. They identify vulnerabilities, exploit weaknesses, and provide recommendations to improve security. Their goal is to protect web systems from threats like SQL injection, cross-site scripting (XSS), and authentication flaws. This role requires expertise in ethical hacking, scripting, and security tools such as Burp Suite and OWASP ZAP.

What are the key skills and qualifications needed to thrive in the Web Penetration Tester position, and why are they important?

To thrive as a Web Penetration Tester, you need a solid background in cybersecurity principles, web application architecture, and vulnerability assessment, often supported by a degree in computer science or a related field. Familiarity with tools like Burp Suite, OWASP ZAP, Metasploit, and relevant certifications such as OSCP or CEH are highly valued. Strong analytical thinking, effective communication, and meticulous attention to detail set candidates apart in this profession. These skills ensure that testers can identify critical security flaws while clearly conveying technical risks to both technical teams and non-technical stakeholders, effectively strengthening organizational cybersecurity.

What is the salary of a web pentester?

The salary of a web penetration tester typically ranges from $70,000 to $130,000 annually, depending on experience, certifications, and location. Entry-level positions may start lower, while experienced professionals with advanced skills and certifications like OSCP or CISSP can earn higher salaries.

What are some of the main challenges faced by Web Penetration Testers in their daily work?

Web Penetration Testers often face the challenge of keeping up with rapidly evolving web technologies and an ever-changing threat landscape. They must carefully balance thorough testing with tight project deadlines, ensuring their work uncovers both common and obscure security vulnerabilities. Collaborating with development and operations teams can require clear communication to explain findings and foster a security-oriented culture. The role can also involve continual learning and adapting to new tools, methodologies, and compliance requirements.

How much do web application penetration testers make?

Web application penetration testers typically earn between $70,000 and $130,000 annually, depending on experience, certifications, and location. Senior testers with advanced skills in tools like Burp Suite or Kali Linux can earn higher salaries, especially in high-demand markets.
More about Web Penetration Tester jobs
What cities are hiring for Web Penetration Tester jobs? Cities with the most Web Penetration Tester job openings:
What are the most commonly searched types of Web Penetration Tester jobs? The most popular types of Web Penetration Tester jobs are:
What states have the most Web Penetration Tester jobs? States with the most job openings for Web Penetration Tester jobs include:
What job categories do people searching Web Penetration Tester jobs look for? The top searched job categories for Web Penetration Tester jobs are:
Web Penetration Tester jobs near you
Infographic showing various Web Penetration Tester job openings in the United States as of June 2026, with employment types broken down into 67% Full Time, and 33% Part Time. Highlights an 100% In-person job distribution, with an average salary of $119,895 per year, or $57.6 per hour.

Penetration Tester

Total Cyber Solutions LLC

Springfield, VA • On-site

$100K - $140K/yr

Full-time

Medical, Dental, Vision, Life, Retirement, PTO

Posted 22 days ago

Job description

We are seeking a Penetration Tester to join our team! You will implement security measures for the protection of computer networks and information.

Responsibilities:

  • Implement and monitor daily security alerts
  • Report and respond to any security breaches or viruses
  • Triage and categorize network intrusions and incidents
  • Perform periodic risk reviews and audits
  • Provide strategies for improving system security

​Qualifications:

  • Two years of experience (Preferred)
  • Red Team Experience (Preferred)
  • Previous experience in network security or other related fields
  • Knowledge of network security technologies and devices
  • Excellent root cause analysis skills
  • Strong attention to detail
  • Clearance

​Certifications: Any of the certifications listed below

  • CASP CE
  • CISA
  • CISSP (or Associate)
  • GCED
  • GICSP
  • GCIH

Additional Certifications (Preferred):

  • Red Team Apprentice Course (RTAC)
  • Red Team Journeyman Course (RTJC)
  • Certified Red Team Operator (CRTO) certification
  • Offensive Security, Rogue Ops- Red Team 1 (ROPS)
  • Certified Professional (OSCP)
  • (GIAC) Exploit Researcher & Advanced Penetration Tester (GXPN)
  • GIAC Penetration Tester (GPEN)
  • GIAC Web Application Penetration Tester (GWAP)

Company Description

Total Cyber Solutions is a premier provider of Government Contracting, managed IT Services, and Cybersecurity Training. We help federal agencies, commercial clients, and small businesses strengthen their cybersecurity posture and achieve operational resilience. As we expand our client base, we seek a Senior Sales Development Representative to lead top-of-funnel growth and drive qualified opportunities into the pipeline.