ZipRecruiter

Log In

1

Web Penetration Testing Jobs (NOW HIRING)

Cyber Defense Technologies

Penetration Tester

Chantilly, VA · On-site

$90K - $130K/yr

Conduct penetration testing that uses both active and passive capabilities to expose and exploit IA ... System methodologies including: client/server, web hosting, web content servers, policy servers ...

Peraton

Penetration Tester

Arlington, VA · On-site

$86K - $138K/yr

... Web Security Testing Guide (WTG), etc. * Demonstrated ability to lead a penetration test and guide Senior/Junior Penetration Testers. * U.S. citizenship required. * An active Secret security ...

Amatriot Group, LLC

Penetration Tester

Rensselaer, NY · On-site

$90K - $105K/yr

Key Responsibilities Penetration Testing and Vulnerability Assessment * Conduct penetration tests ... Proficiency in web application security principles, including OWASP. * Knowledge of common web ...

OCH Technologies LLC

Penetration Tester

Leesburg, VA · On-site

Experience with web application testing following OWASP methodology. Security Clearance Requirement ... Experience with cloud penetration testing (AWS, Azure). * Familiarity with aircraft systems ...

Dark Wolf Solutions

Penetration Tester

Colorado Springs, CO · Hybrid

$130K - $145K/yr

Dark Wolf is actively seeking an experienced Penetration Tester to join our innovative team. This ... Web Services (AWS), Microsoft Azure, and Google Cloud Platform (GCP) * Proficiency in the testing ...

Goldbelt, Inc.

Senior Penetration Tester

$90K - $150K/yr

Summary: The Senior Penetration Tester will independently perform penetration testing of ... testing standards and projects, including OWASP * Knowledge of databases, applications, and Web ...

Dark Wolf Solutions

Penetration Tester

Colorado Springs, CO · Hybrid

$130K - $145K/yr

Dark Wolf is actively seeking an experienced Penetration Tester to join our innovative team. This ... Web Services (AWS), Microsoft Azure, and Google Cloud Platform (GCP) * Proficiency in the testing ...

Dark Wolf Solutions

Penetration Tester

Colorado Springs, CO · On-site

$130K - $145K/yr

Dark Wolf is actively seeking an experienced Penetration Tester to join our innovative team. This ... Web Services (AWS), Microsoft Azure, and Google Cloud Platform (GCP) * Proficiency in the testing ...

Peraton

Penetration Tester

Arlington, VA · On-site

$86K - $138K/yr

... Web Security Testing Guide (WTG), etc. * Demonstrated ability to lead a penetration test and guide Senior/Junior Penetration Testers. * U.S. citizenship required. * An active Secret security ...

Spektrum

Penetration Tester

Hague, ND

Perform web application, infrastructure, and application-level penetration testing. Conduct security design reviews to ensure compliance with NATO security policies and directives. Provide ...

asrcfh

Penetration Tester

Quantico, VA · Hybrid

Proven experience conducting penetration tests of web applications, networks, and other systems. * Experience with a variety of penetration testing tools and techniques (e.g., Rapid7 Nexpose ...

IBM

Expert Penetration Tester

Dallas, TX · On-site

Penetration Testing Experience with operating systems, web applications and network infrastructure. Experience with using Penetration Testing Tools. e.g. NMap, Nessus, Metasploit, BurpSuite, Nikto ...

previous pagenext page

Showing results 21-40

All JobsWeb Penetration Testing Jobs

Web Penetration Testing information

See salary details

$11

$59

$86

How much do web penetration testing jobs pay per hour?

As of Aug 21, 2026, the average hourly pay for web penetration testing in the United States is $59.01, according to ZipRecruiter salary data. Most workers in this role earn between $51.20 and $66.83 per hour, depending on experience, location, and employer.

What is web penetration testing?

Web penetration testing is a security assessment process where ethical hackers simulate cyberattacks on a website or web application to identify vulnerabilities and weaknesses. The goal is to find and fix security flaws before malicious hackers can exploit them. This process involves testing for issues such as SQL injection, cross-site scripting (XSS), authentication problems, and insecure configurations. The results help organizations strengthen their web security and protect sensitive data from breaches.

What are the key skills and qualifications needed to thrive as a web penetration tester?

To excel as a Web Penetration Tester, you need a solid understanding of web application security, networking protocols, and common vulnerabilities, often supported by a degree in computer science or a related field. Familiarity with tools like Burp Suite, OWASP ZAP, Metasploit, and relevant certifications such as OSCP or CEH is typically required. Strong analytical thinking, attention to detail, and effective communication skills help testers identify risks and clearly report findings to technical and non-technical stakeholders. These competencies are crucial for uncovering security flaws, ensuring robust defenses, and helping organizations mitigate potential cyber threats.

What are some common challenges faced by web penetration testers during assessments, and how can they be addressed?

Web penetration testers often encounter challenges such as limited access to required testing environments, incomplete or outdated documentation, and rapidly evolving web technologies that demand continuous learning. Additionally, testers must balance thoroughness with time constraints and ensure clear communication with development and security teams. Addressing these challenges involves proactive coordination with stakeholders, staying updated with industry tools and vulnerabilities, and maintaining detailed, well-structured reporting to facilitate remediation and collaboration.

What is the difference between Web Penetration Testing vs Web Security Analyst?

AspectWeb Penetration TestingWeb Security Analyst
CertificationsOSCP, CEH, GPENCISSP, CISA, GIAC
Work EnvironmentHands-on testing, simulated attacksMonitoring, policy development, incident response
Employer & Industry UsageCybersecurity firms, tech companies, consultingCorporate IT, financial institutions, government agencies

Web Penetration Testing focuses on actively identifying vulnerabilities through simulated attacks, while Web Security Analysts monitor and improve security measures, analyze threats, and respond to incidents. Both roles require cybersecurity certifications but differ in their approach and daily tasks.

More about Web Penetration Testing jobs

What cities are hiring for Web Penetration Testing jobs?

Cities with the most Web Penetration Testing job openings:

What states have the most Web Penetration Testing jobs?

States with the most job openings for Web Penetration Testing jobs include:

What job categories do people searching Web Penetration Testing jobs look for?

The top searched job categories for Web Penetration Testing jobs are:

Web Penetration Testing jobs near you
Infographic showing various Web Penetration Testing job openings in the United States as of August 2026, with employment types broken down into 1% As Needed, 85% Full Time, 10% Part Time, 3% Contract, and 1% Nights. Highlights an 87% Physical, 3% Hybrid, and 10% Remote job distribution, with an average salary of $122,736 per year, or $59 per hour.

Penetration Tester

Cyber Defense Technologies

Chantilly, VA • On-site

$90K - $130K/yr

Full-time

Medical, Dental, Retirement

Re-posted 20 days ago

Job description

Overview: CDT is looking for a Penetration Tester to This will be supporting a government customer onsite in Chantilly, VA. Candidates with OSCP certification are highly recommended to apply.
Clearance: An active Top Secret/SCI with CI poly is required.  Candidates who do not meet these requirements will not be considered.
Responsibilities:
  • Conduct penetration testing that uses both active and passive capabilities to expose and exploit IA vulnerabilities.
  • Review and evaluate information systems and recommend changes to the Government that can improve information confidentiality, integrity and availability.
  • Responsible for performing security focused services to improve security posture.
  • Conduct test and evaluations of software, hardware, networks and applications.
  • Reviews of the documents to ensure completeness and compliance with the RMF process, ICD 503 requirements, and/or other applicable regulations.
Qualifications:
  • High School Diploma/GED, Associates Degree and 5 years of relevant work experience.
  • Bachelor's Degree and 3 years of relevant work experience.
  • Experience in cyber security with a focus on red teaming, penetration testing, or threat hunting.
Desired Qualifications:
  • Strong understanding of network protocols and troubleshooting, server and workstation operating systems, exploits and vulnerabilities.
  • Strong working knowledge of common penetration tools, tactics, techniques, and procedures.
  • Experience with cloud environments.
  • Strong understanding of penetration testing methodologies (MITRE ATT&CK, OWASP).
  • Ability to incorporate threat intelligence data into attached or penetration testing scenarios.
  • Excellent problem solving and troubleshooting skills with a strong attention to detail.
  • Ability to read/write code using interpreted languages (Python, PHP, Ruby, etc.).
  • Experience with simulated/emulated environments and/or virtualization technologies.
  • Experience with orchestration tools and virtualization environments (Docker, Kubernetes, etc.).
  • Experience with industrial control systems deployment, security best practices, vulnerabilities, and penetration testing.
  • ICD 503 and the Government's certification and accreditation process.
  • Networks, computer components, system protocols, and COTS technology.
  • System methodologies including: client/server, web hosting, web content servers, policy servers, directory servers, firewalls, WAN, MAN, LAN, switches, and routers.
  • Software integration of COTS and Government Off-the-Shelf (GOTS) products.
  • Windows, Linux, Unix, and Mac OS X administration.
  • VMware, Xen, Hyper V and other virtualization platforms.
  • Configuring and supporting Windows, Linux, Unix, Mac OS, and other operating systems, VMware, Xen, Hyper V and other virtualization platforms.
  • Experience in Software engineering, program design and implementation, configuration management, system maintenance, integration testing, Information system engineering.
  • System certification activities and efforts related to system certification and accreditation.
  • Research, develop, and maintain knowledge of penetration testing tools, tactics, techniques, and procedures.
  • Research, development, integration, and distribution of information systems security tools and associated documentation
  • Security procedures for systems and software within area of expertise to ensure consistent security policy implementation.
  • Experience in technical project management.
  • Education relevant to computer engineering, information security, information management, cyber security, and/or computer science

Why Join Cyber Defense Technologies?
At CDT, we offer a collaborative and inclusive work environment where your expertise in Penetration Testing will help shape the future of cybersecurity and engineering solutions.
Compensation and Benefits:
  • Competitive salary based on experience.
  • Comprehensive benefits package, including health, dental, and retirement plans.
  • Opportunities for professional development and career advancement.

CDT is committed to hiring and retaining a diverse workforce. We are an Equal Opportunity employer making decisions without regard to race, color, religion, creed, sex, sexual orientation, gender identity, marital status, national origin, age, veteran status, disability, or any other protected class.
Apply Now:
If you are a proactive Penetration Tester and thrive in dynamic environments, we encourage you to apply and join the CDT team!
Salary Range: $90,000 - $130,000