Remote opportunity at
Align TechnologyPenetration Tester
Pathfynder by A-LIGN is seeking a Penetration Tester to execute offensive security assignments focusing on APIs, web applications, and external networks. Operating as part of a…
Career Tools
About This Role
Pathfynder by A-LIGN is seeking a Penetration Tester to execute offensive security assignments focusing on APIs, web applications, and external networks. Operating as part of a technology-enabled cybersecurity firm under A-LIGN, the specialist in this role will conduct manual vulnerability exploitation, assess potential attack paths, and deliver clear remediation documentation. This full-time position reports to the Director of Web Application & External Offensive Operations. This role suits professionals who can…
Job Description
Pathfynder by A-LIGN is seeking a Penetration Tester to execute offensive security assignments focusing on APIs, web applications, and external networks. Operating as part of a technology-enabled cybersecurity firm under A-LIGN, the specialist in this role will conduct manual vulnerability exploitation, assess potential attack paths, and deliver clear remediation documentation. This full-time position reports to the Director of Web Application & External Offensive Operations.
This role suits professionals who can work independently with minimal oversight in a fast-paced setting while maintaining attention to detail and high quality standards. Candidates will communicate technical findings directly to clients, collaborate with colleagues to refine testing tools and procedures, and share practical insights with less-experienced team members.
A-LIGN is a security and compliance partner trusted by over 2,400 global organizations, providing a range of services from penetration testing to privacy compliance. The company offers a suite of employee benefits including comprehensive healthcare coverage, financial programs, wellness support, and professional development resources.
Responsibilities
- Perform penetration testing on external networks, web applications, and APIs according to established scopes and rules of engagement.
- Identify, confirm, and manually exploit vulnerabilities utilizing custom techniques or public exploits.
- Analyze potential attack paths to measure the technical and business impact of discovered flaws.
- Draft comprehensive, accurate reports detailing findings, evidence, risk levels, and remediation advice.
- Engage with clients throughout testing projects via technical walkthroughs, discussions, and inquiry responses.
- Manage assigned projects autonomously while keeping high standards of quality and professionalism.
- Work with team members to evaluate security tools and optimize delivery processes and reporting benchmarks.
- Mentor less-experienced colleagues and clients by sharing practical knowledge.
- Stay informed about current industry trends, emerging vulnerabilities, and novel attack methods.
Requirements
- Possess two to five years of practical, hands-on penetration testing experience in at least one focus area such as external, web application, API, or mobile application testing.
- Demonstrate prior experience carrying out testing projects independently and generating client-ready deliverables.
- Show familiarity with standard testing methodologies and structured evidence collection practices.
- Have experience manually validating exploitable vulnerabilities instead of depending solely on automated scanners.
- Exhibit skill in communicating risk, findings, and remediation steps to internal and external stakeholders.
- Demonstrate proficiency with security tools like Burp Suite, Nmap, SQLmap, Wireshark, Postman, Nuclei, Nessus, and Caido.
- Show competence in at least one scripting language including Python, Bash, JavaScript, PowerShell, or SQL.
- Understand networking concepts, web technologies, access control, authentication, and common security weaknesses.
- Possess strong verbal and written communication skills alongside the ability to manage deadlines in a fast-paced remote environment.
Qualifications
- Hold a Bachelor's or Master's degree in cybersecurity, management information systems, computer science, or a related discipline.
- Hold an OSCP, eWPT, eWPTX, OSWA, or OSWE certification.
Core Skills
Benefits
- Healthcare, Dental, and Vision Benefits
- Employer Paid Life Insurance and Disability Insurance
- Employee Assistance Program
- Pet Insurance
- 401(k) Plan with Employer Matching
- Competitive Bonus Structure
- Tech Allowance
- Certification Reimbursement
- Personalized Career Coaching
- Generous Paid Time Off
- Paid Office Closure December 25-January 1
- Vacation Bonus
- Summer Hours
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
Is this position remote?
Yes, the posting indicates that the role can be performed remotely.
What is the employment type for this role?
This is a full-time, exempt position.
What salary does the position offer?
The salary is not stated in the job posting.
Who does the Penetration Tester report to?
The role reports to the Director, Web Application & External Offensive Operations.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.