Associate, Compliance Security Penetration Tester

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for an Associate, Compliance Security Penetration Tester based in United States.

This role offers the opportunity to help organizations identify and address real-world cybersecurity vulnerabilities through hands-on offensive security assessments.

You’ll work across network, web application, API, mobile, cloud, wireless, and social engineering environments, depending on your expertise.

The position combines technical testing with client-facing consulting, security compliance, reporting, and remediation support.

You’ll collaborate with project managers, security professionals, quality teams, and clients to deliver high-quality assessments on schedule.

The environment encourages continuous technical development, industry certifications, knowledge sharing, and exposure to evolving attack techniques.

You’ll also have opportunities to contribute to testing methodologies, mentor developing professionals, and strengthen client relationships.

This is a remote position with occasional travel and a strong focus on professional growth and cybersecurity impact.

Accountabilities:

• Conduct security assessments and penetration tests across internal and external networks, web applications, APIs, mobile applications, cloud environments, wireless systems, and other technologies as applicable.
• Simulate sophisticated cyberattacks to identify vulnerabilities, security weaknesses, and potential compliance gaps.
• Advise clients on technical security and compliance activities, helping them understand findings and appropriate remediation approaches.
• Manage assigned priorities, testing activities, and project deliverables while meeting utilization, quality, and timeline expectations.
• Support engagements from initial scoping through testing, reporting, remediation, and final delivery.
• Collaborate with project management, quality, sales, and delivery teams to ensure strong customer experiences and successful project outcomes.
• Assist with engagement scoping, project planning, escalation management, report generation, and quality assurance.
• Develop and improve penetration testing processes, procedures, methodologies, and supporting documentation.
• Build and maintain professional relationships with clients and communicate technical findings clearly to both technical and non-technical stakeholders.
• Continue expanding technical expertise and pursue relevant cybersecurity certifications and professional development.
• Mentor and support less experienced team members while contributing to broader team objectives and performance.
• Participate in initiatives that improve testing efficiency, assessment quality, and the overall client experience.

Requirements:

• Bachelor’s degree in a relevant discipline or an equivalent combination of education and professional experience.
• At least 3 years of information security experience, including hands-on web application and network penetration testing.
• Experience working within enterprise technology environments and a strong understanding of networks, servers, workstations, and applications.
• Practical scripting experience with languages such as Python, PowerShell, Shell, or Ruby.
• Experience with one or more security and compliance frameworks, such as PCI, FISMA, HIPAA, FedRAMP, or HITRUST.
• 1-3 years of experience in IT security auditing and/or compliance-focused work.
• Ability to interact confidently with management and provide security guidance in a consultative environment.
• Strong written, verbal, communication, and presentation skills, with the ability to explain complex security concepts effectively.
• Strong understanding of cybersecurity principles, security policies, and industry best practices.
• Ability to manage multiple priorities independently while collaborating effectively with distributed teams.
• Willingness and ability to travel up to 20% as required.
• A proactive, curious mindset and commitment to continuously developing technical and consulting expertise.
• Experience leading penetration testing engagements, working directly with clients, or operating in a consulting environment is a strong advantage.
• Additional value comes from experience with malware reverse engineering, obfuscation, cryptography, C and compiler toolchains, technical security writing, or public security research.
• Participation in CTFs, Hack The Box, cyber-defense competitions, security conferences, or other cybersecurity communities is a plus.

Benefits:

• Salary: $64,000-$117,000 per year, with actual compensation based on factors including experience, education, geographic location, training, licensure, and certifications.

• Potential eligibility for annual incentive, commission, and/or recognition programs.
• Flexible work model designed to support effective remote and office-based working arrangements.
• Comprehensive insurance options to support employees and their families.
• Paid parental leave.
• Flexible time off.
• Certification and professional training reimbursement.
• Digital mental health and wellbeing support.
• Employee resource groups and opportunities to participate in virtual and in-person community events.
• Opportunities for ongoing technical development, industry certifications, and career growth.
• Collaborative environment focused on cybersecurity expertise, professional development, and meaningful client impact.