Penetration Tester (W-2 or 1099 | U.S.-Based)
- Manual Internal and External Penetration Testing
- Internal Segmentation Testing (lateral movement, trust boundary analysis)
- Web Application Penetration Testing (OWASP Top 10, business logic flaws)
- Mobile Application Penetration Testing (Android/iOS)
- API Penetration Testing (auth flows, token abuse, endpoint assessment)
- Social Engineering Penetration Testing (phishing, vishing, pretexting)
- Hardware/IoT Penetration Testing as needed
- Create detailed, validated, and remediation-focused penetration testing reports
- Present findings to both technical and non-technical stakeholders
- Maintain alignment with industry standards (NIST, PTES, OWASP, MITRE, etc.)
- 3–7+ years of penetration testing experience
- Full-stack offensive testing skills (network, web, mobile, API, IoT, SE)
- Proficiency with Burp Suite, Nmap, Nessus, Metasploit, Wireshark, etc.
- Strong reporting and documentation skills
- Excellent client-facing communication
- Familiarity with OWASP, PTES, NIST SP 800-115, OSSTMM
- Ability to work independently
- Must be able to travel within the United States (non-negotiable)
- Must be U.S.-based
- You chase the why behind technical problems
- You take pride in craftsmanship and validated manual testing
- You deliver on commitments and own outcomes
- You communicate clearly, without ego
- You adapt quickly when situations are ambiguous
- You always act with integrity
- You pursue growth and mastery in your craft
W-2 Employees
- Unlimited flex vacation
- Paid parental leave
- 401(k) with 100% employer match
- Medical, dental, vision coverage
- Professional development & certification reimbursement
- Remote-first culture
- Flexible project-based or hourly contracting
- Remote work
- Access to RSI standards and methodologies
- Long-term contracting potential
RSI Security is proud to be an Equal Opportunity Employer. We value equity, inclusion, and diversity as part of our broader commitment to respecting fundamental human rights across our value chain. The Company will consider qualified applicants with arrest and conviction records, consistent with applicable laws.
For more information on RSI Security, please visit www.rsisecurity.com or our LinkedIn page. On our career site, you will also find the steps guiding you through our hiring process.
Top Skills
What We Do
RSI Security is a cybersecurity-focused technology company that helps private and public sector organizations in highly regulated industries effectively manage risk. RSI Security provides cyber engineering, assessment, advisory services, and technical testing to amp up clients' security posture while mitigating business risk. We have experts for every cybersecurity and compliance need– PCIDSS, CMMC and NIST, MSSP, IT Security, HITRUST, HIPAA / HITECH, CCPA, GDPR, threat detection, security awareness training, and much more. Our team members come from diverse backgrounds and specialties. Our team members include published authors, open-source developers, industry researchers, and conference presenters. For more information, visit rsisecurity.com
.png){kind=logo}
