Please mention DailyRemote when applying
AI Summary
Perform manual penetration testing across web, mobile, API, and cloud environments to identify and exploit vulnerabilities. Deliver end-to-end engagements including planning, execution, and providing actionable remediation guidance to stakeholders.
This is a remote position.
We are looking for a skilled and curious Security Analyst (Penetration Tester) to join a high-performing offensive security team.
This role focuses on delivering high-quality penetration testing across web, mobile, API, infrastructure, and cloud environments, helping clients identify vulnerabilities and reduce real-world risk.
You will work closely with internal teams and clients, contributing not only to testing engagements but also to research, tooling, and continuous improvement. This role is ideal for someone who is hands-on, analytical, and passionate about cybersecurity.
Work setup: Remote
Type: Full-time
Your Duties
As a Security Analyst (Penetration Tester), you will be responsible for:
- Perform manual-first penetration testing across web, API, and mobile (iOS/Android) applications
- Identify and exploit vulnerabilities including business logic flaws, authentication issues, and attack chains (e.g., IDOR)
- Conduct infrastructure testing (internal/external networks, Active Directory, perimeter systems)
- Perform cloud security assessments (AWS, Azure)
- Apply threat-led and adversary simulation techniques where relevant
- Develop scripts and tools to improve testing efficiency and quality
- Own end-to-end delivery of engagements (planning, execution, reporting, and close-out)
- Produce clear, structured reports with risk ratings and actionable remediation guidance
- Present findings to both technical and non-technical stakeholders
- Collaborate with internal teams and support pre-sales activities when needed
- Contribute to internal knowledge sharing, playbooks, and mentoring junior team members
Requirements
- 2+ years of hands-on experience in penetration testing (Mid to Senior level: 2–6+ years preferred)
- Strong understanding of OWASP Top 10, ASVS, and API Security Top 10
- Experience with manual testing techniques, including vulnerability chaining and exploitation
- Proficiency with tools such as Burp Suite, Nmap, Kali Linux, and scripting (Python or PowerShell)
- Experience in web, API, and at least one of the following: mobile, infrastructure, or cloud testing
- Strong analytical and problem-solving skills
- Excellent written and verbal communication in English
- Ability to clearly communicate technical risks and remediation steps
- Strong attention to detail and structured documentation skills
- Ability to work independently and as part of a team
Automatically Apply to the Best Remote Jobs
Stop the endless job search. Our AI finds and applies to the best jobs for you.
