{"id":816341,"url":"https://alion.io/job/sixgen-senior-web-application-penetration-tester","title":"Senior Web Application Penetration Tester","company":{"id":686212,"name":"SIXGEN","domain":"sixgen.io","url":"https://alion.io/company/sixgen","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"B","score":80,"open_postings":20,"ghost_share":0.25,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":84,"computed_at":"2026-10-29T05:49:05Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"inferred_payroll_markers","remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":125000,"max":165000,"currency":"USD","period":"year","gross":null,"usd_annual":165000},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":true}],"status":"live","first_seen_at":"2024-03-22T12:58:40Z","employer_posted_date":"2026-09-21","last_verified_at":"2026-10-30T03:47:54Z","board_verified":true,"closed_at":null,"days_open":951,"trust":{"level":"ghost","repost_count":0,"flags":["stale","company_stale"],"days_open":950},"description":"SIXGEN’s mission is to deliver agile, mission-ready cybersecurity solutions that empower government and critical infrastructure organizations to stay ahead of advanced cyber threats. We combine innovation, deep expertise, and cutting-edge capabilities to uncover vulnerabilities, protect vital systems, and ensure operational superiority in an ever-evolving digital landscape.\nPOSITION OVERVIEW\nPosition: Senior Web Application Penetration Tester\nJob Type: Full-time\nLocation: Remote\nClearance Requirements: Must be able to obtain a Secret Clearance\nTravel Requirements: Up to 10%\nExperience: 5+ years\nSalary:$125-$165K\nWHAT YOU'LL DO\nWe are seeking a skilled and motivated Senior Web Application Penetration Tester to join our growing cyber operations team. The ideal candidate will possess deep expertise in web application security testing, vulnerability research, and exploitation techniques, with the ability to identify complex attack paths and develop creative solutions to challenging security problems.\nThis role goes far beyond automated scanning. Successful candidates will conduct in-depth assessments of web applications, APIs, mobile applications, and supporting infrastructure while leveraging custom tooling, manual testing techniques, and advanced exploitation methodologies to uncover impactful security findings.\nKEY RESPONSIBILITIES\nWeb Application Security Assessments\nConduct penetration testing of web applications, APIs, mobile applications, databases, and client-side technologies.\nPerform application enumeration, endpoint discovery, vulnerability research, and exploitation activities.\nIdentify, validate, and assess vulnerabilities across complex environments.\nAnalyze attack paths and security weaknesses to determine business and operational impact.\nTechnical Analysis & Research\nDevelop and utilize custom tools, scripts, and payloads to support testing activities.\nPerform network mapping, vulnerability analysis, and security assessments across applications and supporting infrastructure.\nResearch emerging vulnerabilities, attack techniques, and exploitation methodologies.\nSupport post-exploitation activities involving cloud and enterprise environments when applicable.\nClient Engagement & Reporting\nCollaborate with clients and internal teams to define scope, review findings, and recommend remediation strategies.\nCommunicate technical concepts and findings to both technical and non-technical stakeholders.\nProduce comprehensive reports, including detailed findings, exploitation procedures, risk analysis, and mitigation recommendations.\nParticipate in client meetings and provide ongoing updates throughout assessment activities.\nQUALIFICATIONS\n5+ years of experience in web application penetration testing or offensive cybersecurity.\nDemonstrated experience conducting manual web application security assessments.\nKnowledge of modern web application vulnerabilities, attack methodologies, and exploitation techniques.\nExperience with network mapping, vulnerability scanning, and penetration testing methodologies.\nFamiliarity with NIST 800-series standards and cybersecurity best practices.\nExperience developing scripts, payloads, or custom testing tools.\nStrong analytical, problem-solving, and communication skills.\nPreferred Certifications\nOne or more of the following certifications is strongly preferred:\n CWES (preferred)\n CWEE (preferred)\nOSCP\nOSWA\nOSWE\nCRTO\nGWAPT\nOther relevant hands-on offensive security certifications\nPREFERRED QUALIFICATIONS\nExperience with cloud environments and post-exploitation activities.\nExperience with Active Directory security assessments.\nFamiliarity with FISMA compliance requirements.\nExperience supporting government or regulated industry clients.\nProficiency with common offensive security tools and frameworks.\nCOMPENSATION & BENEFITS\nAt SIXGEN, we are committed to fair and equitable compensation practices. Compensation for this role will be based on experience, qualifications, technical expertise, and overall alignment with the position.\nAdditionally, SIXGEN offers top-tier benefits for full-time employees, including:\nEmployer-paid health insurance premiums (medical, dental, vision) for you and your family \nEmployer-paid short/long term disability insurance and basic life/AD&D insurance\n401K with a 4% employer contribution\nProfessional development reimbursement options available (training, certification, education, etc)\nFlexible and remote work policies for most positions\nFlexible PTO and holiday schedule\nFor more information, please reach out to our Director of Human Resources, Amy Maxwell at .\nOUR COMMITMENT\nSIXGEN is an Equal Opportunity Employer. We ensure that all applicants are considered for employment without regard to race, color, religion, sexual orientation, gender identity, national origin, disability, age, marital status, ancestry, projected veteran status, or any other protected group or class.\nWe are committed to fostering an inclusive culture that values diversity in our people, reflecting the communities we serve and our customer base. We strive to attract and retain a diverse talent pool and create an environment where everyone is empowered to be their authentic selves at work.","description_format":"text","description_chars":5232,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":true,"languages":[]},"benefits":["401k plan","Health insurance","Professional development"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Penetration Testing","Cybersecurity","National Security","Homeland Security"],"lifecycle":[{"event":"open","at":"2026-09-12T11:26:31Z"}],"visa":[],"liveness":{"score":6,"band":"cold","label":"Long shot","p_open":1,"p_active":0.213,"p_room":0.28,"age_days":950,"expected_fill_days":84,"reasons":["conf:3","velocity","ghost","win:tail","crowd:"],"computed_at":"2026-10-29T05:49:05Z"},"pay":{"stated_usd_annual":165000,"is_top_pay":true},"html_url":"https://alion.io/job/sixgen-senior-web-application-penetration-tester","json_url":"https://alion.io/job/sixgen-senior-web-application-penetration-tester.json","meta":{"generated_at":"2026-10-30T04:27:06Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":6042,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-31T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":686212},"rest":"https://alion.io/mcp/rest/get_company?id=686212"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsixgen-senior-web-application-penetration-tester"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsixgen-senior-web-application-penetration-tester"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsixgen-senior-web-application-penetration-tester"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/sixgen-senior-web-application-penetration-tester\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsixgen-senior-web-application-penetration-tester"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":816341}},{"tool":"search_jobs","arguments":{"company":"sixgen.io","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":816341},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}