Strong understanding of common vulnerability classes (OWASP Top 10, SANS Top 25) and remediation strategies
Experience with vulnerability management platforms (e.g., Jira, ServiceNow, DefectDojo, or similar)
Requirements:
Triage – Review and validate incoming vulnerability reports; assess severity, exploitability, and business impact
Retesting – Perform targeted retesting of remediated vulnerabilities and document pass/fail results
Tracking Remediation Support – Monitor remediation timelines against SLAs and coordinate with development teams
Reporting – Maintain accurate records in the vulnerability management platform and produce weekly status reports
Job description
Job Title: Penetration Tester
Work Location: Remote – USA
Pay: $70-90/ hour
Must haves: 3 plus years Experience in hands on penetration testing experience or offensive security testing
As a member of our Attack & Pentest team, you will serve as a frontline analyst responsible for validating, prioritizing, and driving the closure of security vulnerabilities across the enterprise. You will assess findings for exploitability and business risk, retest applications and infrastructure after remediation, and work directly with engineering teams to ensure issues are resolved effectively and on schedule.
This is a hands-on technical role that requires both offensive security skills and the ability to communicate clearly with developers, architects, and leadership.
Responsibilities:
Triage – Review and validate incoming vulnerability reports from Mythos; assess severity, exploitability, and business impact; de-duplicate and enrich findings with reproduction steps and evidence
Retesting – Perform targeted retesting of remediated vulnerabilities to confirm fixes are effective and complete; document pass/fail results with technical evidence
Tracking & Remediation Support – Monitor remediation timelines against SLAs; coordinate with development and infrastructure teams to ensure timely closure; escalate aging findings per policy
Reporting – Maintain accurate records in the vulnerability management platform; produce weekly status reports on open/closed/overdue findings; contribute to executive-level metrics
Collaboration – Partner with application security, DevOps, and engineering teams to provide remediation guidance and technical context for findings
Process Improvement – Identify patterns in recurring vulnerabilities; recommend process or tooling improvements to reduce triage backlog
Required Qualifications:
3+ years of hands-on penetration testing experience (web applications, APIs, infrastructure)
