<h4><strong>About the Role</strong></h4> <p>The Penetration Tester works to execute offensive security activities for Pathfynder by A-LIGN. In this role, you will be responsible for the delivery of external network, web application, and API penetration testing engagements. As the Penetration Tester, you will provide exceptional technical and client-focused testing strategies to help support the continued growth of our fast-paced company. A-LIGN will depend on you as the Penetration Tester to independently identify and validate real-world security risks, manually exploit vulnerabilities, document findings, and communicate practical remediation guidance to clients.</p> <h4><strong>Reports to</strong></h4> <p>Director, Web Application & External Offensive Operations</p> <h4><strong>Pay Classification</strong></h4> <p>Full-Time, Exempt</p> <h4><strong>Responsibilities</strong></h4> <ul> <li><strong> </strong>Execute external network, web application, and API penetration testing engagements</li> <li><strong> </strong>Identify, validate, and manually exploit vulnerabilities using public exploits, custom-developed exploits, or a combination of techniques</li> <li><strong> </strong>Evaluate findings in context, develop realistic attack paths, and accurately assess business and technical risk</li> <li><strong> </strong>Deliver clear, accurate, client-ready reports that explain findings, risk ratings, evidence, and actionable remediation guidance</li> <li><strong> </strong>Communicate technical issues, testing results, and remediation recommendations to client stakeholders</li> <li><strong> </strong>Maintain project quality and timelines while executing assigned engagements with minimal oversight</li> <li><strong> </strong>Collaborate with the offensive security team to evaluate tools, improve delivery methods, and share technical knowledge</li> <li><strong> </strong>Mentor junior testers and contribute to the development of team capabilities and repeatable testing practices</li> </ul> <h4><strong>Minimum Qualifications</strong></h4> <p>EDUCATION</p> <ul> <li><strong> </strong>Degree in<strong> </strong>in cybersecurity, computer science, a related discipline, or equivalent professional experience</li> </ul> <p>EXPERIENCE</p> <ul> <li><strong> </strong>5+ years of hands-on offensive security experience, including at least 3 years focused on external network, web application, or API penetration testing</li> <li><strong> </strong>Experience performing web application penetration testing using black-box, grey-box, and white-box approaches</li> <li><strong> </strong>Experience testing APIs, including REST, GraphQL, SOAP, or gRPC</li> <li><strong> </strong>Proven ability to manage engagements from scoping and execution through reporting and client debriefs.</li> <li><strong> </strong>Working knowledge of OWASP WSTG, OWASP ASVS, OWASP API Security Top 10, and PTES</li> <li><strong> </strong>Consulting or client-facing security delivery experience is preferred</li> <li><strong> </strong>Mobile application penetration testing experience across iOS or Android is preferred</li> <li><strong> </strong>White-box or source-code-assisted testing experience is preferred</li> </ul> <p>CERTIFICATIONS</p> <ul> <li><strong> Required at least one of the following: </strong>OSCP/OSCP+, OSWA, eWPT, HTB CWES, TCM PWPP, GWAPT, GPEN, or CREST CRT<strong> </strong></li> <li><strong> Preferred: </strong>OSWE, HTB CWEE, BSCP, eWPTX, CREST CCT APP, TCM PWPE, OSEP, or GXPN</li> <li><strong> </strong>Published CVEs, conference presentations, or meaningful contributions to open-source security tooling may be considered in place of certifications</li> </ul> <p>SKILLS</p> <ul> <li><strong> </strong>Advanced manual testing skills, including the ability to chain lower-severity findings into high-impact attack paths</li> <li><strong> </strong>Advanced web exploitation knowledge, including access control and authorisation flaws, OAuth, SAML and JWT abuse, SSRF, deserialisation, request smuggling, race conditions, and business logic abuse</li> <li><strong> </strong>Knowledge of external attack surfaces, including OSINT, asset discovery, edge-device exploitation, and SSO or MFA attack techniques</li> <li><strong> </strong>Proficiency with scripting languages such as Python, Bash, JavaScript, PowerShell, or Go, including the ability to build custom tooling and exploits</li> <li><strong> </strong>Proficiency with offensive security and assessment tools such as Burp Suite, Caido, Nmap, Nuclei, SQLmap, ffuf, Postman, and Nessus</li> <li><strong> </strong>Familiarity with common application frameworks, including Laravel, Express.js, ASP.NET Core, Spring, and Django</li> <li><strong> </strong>Ability to write clear, concise, client-ready reports with accurate risk ratings and actionable remediation guidance</li> <li><strong> </strong>Excellent verbal and written communication skills, with the ability to explain technical risks to technical and non-technical audiences</li> <li><strong> </st