Offensive Security PenTester
3b staffingSan Diego (CA)
Offensive Security PenTester
Posted 8 days ago
3b staffingSan Diego (CA)
SENIORITY
Senior
About the role
Job Title: Offensive Security PenTester
Location: Remote (U.S. based)
Type: Contract-to-HireAbout the Role
Offensive Security PenTester with 5+ years' experience in Web App testing (Mobile/IoT a plus), strong knowledge of OWASP Top 10, pentesting tools (Burp, Metasploit, Nmap, Kali), scripting (Python/Bash/PowerShell), and US-based.
Responsibilities:
- Perform penetration testing on Web Applications; Mobile and IoT testing a plus
- Identify, exploit, and document security vulnerabilities across client environments
- Deliver detailed reports with actionable remediation strategies
- Collaborate with internal teams and clients to review findings and mitigation steps
- Stay current with the latest offensive security tools, techniques, and exploits
- Contribute to client security assessments and ongoing consulting engagements
Qualifications:
- 5+ years of hands-on penetration testing experience (more senior candidates also considered)
- Strong background in Web Application testing (OWASP Top 10, SANS CWE)
- Experience with common pentesting tools (e.g., Burp Suite, Metasploit, Nmap, Kali, etc.)Familiarity with scripting languages (Python, PowerShell, Bash) for exploit development and automationOSCP, OSWE, GPEN, GWAPT, or similar certifications preferred
- Must be authorized to work and reside in the United States
Before you apply
Applying takes about a minute. These four things decide how fast it moves after that.
Your profile is current
It's what we read first. Occupations, seniority and locations matter more than a long history.
Two examples you can talk through
Not a portfolio — just two pieces of work where you can explain the decisions and what you'd change.
A number in mind
What you're on now and what would make you move. We negotiate better when we know both.
Your notice period
Employers plan around it, and it's the question that stalls offers most often.
Once you apply, someone reads it and calls you before anything reaches the employer — usually within two working days.