Remote opportunity at
Align TechnologyPenetration Tester
Align Technology is seeking a Penetration Tester to conduct offensive security engagements for Pathfynder by A-LIGN. This role suits experienced security professionals who can independently uncover…
Career Tools
About This Role
Align Technology is seeking a Penetration Tester to conduct offensive security engagements for Pathfynder by A-LIGN. This role suits experienced security professionals who can independently uncover real-world threats, perform manual vulnerability exploitation, and provide clients with practical remediation steps. Pathfynder by A-LIGN is a technology-enabled cybersecurity division offering offensive and defensive services under A-LIGN, a compliance and security partner serving more than 2,400 global enterprises. The position reports directly to…
Job Description
Align Technology is seeking a Penetration Tester to conduct offensive security engagements for Pathfynder by A-LIGN. This role suits experienced security professionals who can independently uncover real-world threats, perform manual vulnerability exploitation, and provide clients with practical remediation steps. Pathfynder by A-LIGN is a technology-enabled cybersecurity division offering offensive and defensive services under A-LIGN, a compliance and security partner serving more than 2,400 global enterprises. The position reports directly to the Director of Web Application & External Offensive Operations.
Responsibilities
- Perform external network, web application, and API penetration testing engagements
- Uncover, test, and manually exploit vulnerabilities using custom or public methods
- Analyze findings to construct realistic attack pathways and assess technical and business risks
- Produce thorough reports containing risk ratings, evidence, and actionable advice for clients
- Present technical details, testing outcomes, and recommendations to client stakeholders
- Manage project schedules and maintain delivery quality with minimal supervision
- Partner with the offensive security team to refine delivery techniques and assess tooling
- Guide junior testers and support the growth of team methodologies
Requirements
- 5+ years of hands-on offensive security experience, with at least 3 years dedicated to external networks, web applications, or APIs
- Proficiency in black-box, grey-box, and white-box web application testing
- Experience testing REST, GraphQL, SOAP, or gRPC APIs
- Demonstrated ability to handle projects from scoping through client debriefing
- Familiarity with PTES, OWASP WSTG, OWASP ASVS, and OWASP API Security Top 10
- Advanced manual testing and web exploitation capabilities
- Knowledge of external attack surfaces including OSINT and edge devices
- Familiarity with scripting languages such as Python, Bash, JavaScript, PowerShell, or Go
- Experience using assessment tools such as Burp Suite, Nmap, Nuclei, SQLmap, and Postman
- Familiarity with application frameworks like Laravel, Express.js, ASP.NET Core, Spring, and Django
- Strong communication skills for presenting technical risks to diverse audiences
Qualifications
- Degree in cybersecurity, computer science, or a related field
- Consulting or client-facing security delivery experience
- Mobile application penetration testing experience for iOS or Android
- White-box or source-code-assisted testing background
- At least one required certification such as OSCP/OSCP+, OSWA, eWPT, HTB CWES, TCM PWPP, GWAPT, GPEN, or CREST CRT
- Preferred certifications include OSWE, HTB CWEE, BSCP, eWPTX, CREST CCT APP, TCM PWPE, OSEP, or GXPN
- Published CVEs, security conference presentations, or open-source tool contributions
- Experience evaluating AI or LLM-integrated applications
- Familiarity with the OWASP Top 10 for LLM Applications and cloud platforms like AWS, Azure, or GCP
Core Skills
Benefits
- Healthcare, dental, and vision coverage
- Employer-paid life insurance and disability insurance
- Employee Assistance Program
- Pet insurance
- 401(k) plan with employer matching
- Competitive bonus structure
- Technology allowance
- Certification reimbursement
- Personalized career coaching
- Generous paid time off
- Paid office closure from December 25 through January 1
- Vacation bonus and summer hours
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
What is the location or remote policy for this role?
The position is remote.
What is the employment type?
The role is full-time and exempt.
What is the salary for this position?
The salary is not stated in the job posting.
Who does this position report to?
The Penetration Tester reports to the Director of Web Application & External Offensive Operations.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.