Senior Web Application Penetration Tester
Read straight from SixGen, Inc.'s careers page, verified 1d ago.Seekless can tailor your résumé to it.
Seekless can write your résumé for this posting first.
Before you apply
Salary$125k – $165k
LocationRemote
Work moderemote · United States
Typefull-time
SenioritySenior
Experience5+ yrs
DepartmentOperations
Company size51–200 people
PostedMar 22, 2024 · 2y ago
Verified live1d ago
May no longer be actively hiring
Posted by the company on Mar 22, 202457% of this company's open roles have been listed for 90+ days
At a glanceSummarised by Seekless from the posting.
Must be able to obtain a Secret Clearance
5+ years of experience in web application penetration testing or offensive cybersecurity
Demonstrated experience conducting manual web application security assessments
Knowledge of modern web application vulnerabilities, attack methodologies, and exploitation techniques
Experience with network mapping, vulnerability scanning, and penetration testing methodologies
Familiarity with NIST 800-series standards and cybersecurity best practices
Experience developing scripts, payloads, or custom testing tools
Strong analytical, problem-solving, and communication skills
CWES (preferred)
CWEE (preferred)
OSCP
OSWA
OSWE
CRTO
GWAPT
Other relevant hands-on offensive security certifications
Experience with cloud environments and post-exploitation activities
Experience with Active Directory security assessments
Familiarity with FISMA compliance requirements
Experience supporting government or regulated industry clients
Proficiency with common offensive security tools and frameworks
Skills
Web Application Security
API Security
Mobile Application Security
Penetration Testing
Vulnerability Research
Exploitation
NIST 800-series
Active Directory
Cloud Environments
Benefits
Health insurance
Dental insurance
Vision insurance
Disability insurance
Life insurance
401(k)
Professional development
Remote work
Flexible PTO
Holiday schedule
About the company
SIXGEN’s mission is to deliver agile, mission-ready cybersecurity solutions that empower government and critical infrastructure organizations to stay ahead of advanced cyber threats. We combine innovation, deep expertise, and cutting-edge capabilities to uncover vulnerabilities, protect vital systems, and ensure operational superiority in an ever-evolving digital landscape.
POSITION OVERVIEW
Position: Senior Web Application Penetration TesterJob Type: Full-timeLocation: RemoteClearance Requirements: Must be able to obtain a Secret ClearanceTravel Requirements: Up to 10%
Experience: 5+ years
Salary:$125-$165K
WHAT YOU’LL DO
We are seeking a skilled and motivated Senior Web Application Penetration Tester to join our growing cyber operations team. The ideal candidate will possess deep expertise in web application security testing, vulnerability research, and exploitation techniques, with the ability to identify complex attack paths and develop creative solutions to challenging security problems.
This role goes far beyond automated scanning. Successful candidates will conduct in-depth assessments of web applications, APIs, mobile applications, and supporting infrastructure while leveraging custom tooling, manual testing techniques, and advanced exploitation methodologies to uncover impactful security findings.
KEY RESPONSIBILITIES
Web Application Security Assessments
•
Conduct penetration testing of web applications, APIs, mobile applications, databases, and client-side technologies.
•
Perform application enumeration, endpoint discovery, vulnerability research, and exploitation activities.
•
Identify, validate, and assess vulnerabilities across complex environments.
•
Analyze attack paths and security weaknesses to determine business and operational impact.
Technical Analysis & Research
•
Develop and utilize custom tools, scripts, and payloads to support testing activities.
•
Perform network mapping, vulnerability analysis, and security assessments across applications and supporting infrastructure.
•
Research emerging vulnerabilities, attack techniques, and exploitation methodologies.
•
Support post-exploitation activities involving cloud and enterprise environments when applicable.
Client Engagement & Reporting
•
Collaborate with clients and internal teams to define scope, review findings, and recommend remediation strategies.
•
Communicate technical concepts and findings to both technical and non-technical stakeholders.
•
Produce comprehensive reports, including detailed findings, exploitation procedures, risk analysis, and mitigation recommendations.
•
Participate in client meetings and provide ongoing updates throughout assessment activities.
QUALIFICATIONS
•
5+ years of experience in web application penetration testing or offensive cybersecurity.
•
Demonstrated experience conducting manual web application security assessments.
•
Knowledge of modern web application vulnerabilities, attack methodologies, and exploitation techniques.
•
Experience with network mapping, vulnerability scanning, and penetration testing methodologies.
•
Familiarity with NIST 800-series standards and cybersecurity best practices.
•
Experience developing scripts, payloads, or custom testing tools.
•
Strong analytical, problem-solving, and communication skills.
Preferred Certifications
Nice to have
One or more of the following certifications is strongly preferred:
•
CWES (preferred)
•
CWEE (preferred)
•
OSCP
•
OSWA
•
OSWE
•
CRTO
•
GWAPT
•
Other relevant hands-on offensive security certifications
PREFERRED QUALIFICATIONS
•
Experience with cloud environments and post-exploitation activities.
•
Experience with Active Directory security assessments.
•
Familiarity with FISMA compliance requirements.
•
Experience supporting government or regulated industry clients.
•
Proficiency with common offensive security tools and frameworks.
COMPENSATION & BENEFITS
At SIXGEN, we are committed to fair and equitable compensation practices. Compensation for this role will be based on experience, qualifications, technical expertise, and overall alignment with the position.
Additionally, SIXGEN offers top-tier benefits for full-time employees, including:
•
Employer-paid health insurance premiums (medical, dental, vision) for you and your family
•
Employer-paid short/long term disability insurance and basic life/AD&D insurance
•
401K with a 4% employer contribution
•
Professional development reimbursement options available (training, certification, education, etc)
•
Flexible and remote work policies for most positions
•
Flexible PTO and holiday schedule
For more information, please reach out to our Director of Human Resources, Amy Maxwell at [email protected].
OUR COMMITMENT
SIXGEN is an Equal Opportunity Employer. We ensure that all applicants are considered for employment without regard to race, color, religion, sexual orientation, gender identity, national origin, disability, age, marital status, ancestry, projected veteran status, or any other protected group or class.
We are committed to fostering an inclusive culture that values diversity in our people, reflecting the communities we serve and our customer base. We strive to attract and retain a diverse talent pool and create an environment where everyone is empowered to be their authentic selves at work.