This role involves testing client's internal and external networks, web applications, and APIs as a Penetration Tester. You will provide debriefing to both client technical and executive teams on security assessment findings, solve challenging technical problems, and build creative solutions. As a trusted advisor, you will offer expert opinions to help clients navigate difficult business decisions, lead teams on engagements, mentor co-workers, and contribute to the advancement of the assessment and penetration testing practice.
Responsibilities
Identify and disclose vulnerabilities and vulnerable components of client infrastructures
Execute web application and network penetration tests independently, providing clients with remediation guidance for all significant identified vulnerabilities
Contribute to Assessment Research and Development initiatives (identifying new 0-day vulnerabilities, improving attack methodologies, improving penetration test tooling, etc.)
Develop and adhere to process documentation in support of cyber penetration testing execution
Identify emerging security risks and collaborate with internal service teams and clients to develop appropriate mitigation strategies
Configure and support various operating systems (Windows, Linux, UNIX, macOS), virtualization platforms (VMware, Xen, Hyper-V), and cloud environments (AWS, Azure) used in penetration testing
Effectively assess and communicate security risks, business impact, and appropriate levels of urgency to stakeholders
Participate in client engagement kickoff meetings, technical debriefings, and executive presentations
Collaborate effectively with internal teams, external organizations, and client stakeholders throughout security assessment engagements
Share knowledge, provide technical guidance, and train team members on penetration testing methodologies, tools, and best practices
Support continuous improvement initiatives to enhance the effectiveness and efficiency of penetration testing services
Perform other duties as assigned
Requirements
Excellent organizational, verbal, and written communication skills, including the ability to explain complex technical findings to nontechnical audiences
Strong understanding of cybersecurity fundamentals, common vulnerabilities, attack methodologies, and remediation strategies
Demonstrated experience in vulnerability discovery, security engineering, application security, and penetration testing
Intermediate to advanced proficiency with virtualization and containerization technologies
Strong analytical, critical-thinking, and problem-solving skills
Ability to independently manage multiple client engagements, prioritize competing deadlines, and deliver high-quality results
Millions of jobs, with real people getting hired every day
200,000+
New jobs added daily
7,000,000+
Verified job listings
1,000,000+
Tailored applications submitted
Strong attention to detail, particularly in documenting vulnerabilities, supporting evidence, and remediation recommendations
Ability to work collaboratively in a remote, client-focused consulting environment
Required Work Sample: Candidates must be able to provide a sanitized sample penetration testing report demonstrating their ability to document vulnerabilities, assess risk, present technical findings, and communicate actionable remediation recommendations. All samples must exclude confidential client information.
Strong foundational knowledge and hands-on experience in web application and network penetration testing. Experience with mobile applications, APIs, and cloud environments is a plus.
Previous experience in cybersecurity consulting, penetration testing, or offensive security assessments
Solid understanding of common web application vulnerabilities, exploitation techniques, and remediation options
Knowledge of IT infrastructure, security engineering, system and network security, authentication protocols, and applied cryptography
Experience with configuration management, system maintenance, integration testing, penetration testing, and vulnerability analysis
Knowledge of system architectures and networking technologies, including client/server environments, web hosting, directory services, firewalls, WAN, MAN, LAN, switches, and routers
Proficiency with macOS, Linux, and Windows operating systems
Experience preparing professional penetration testing reports and presenting assessment results to clients
Familiarity with industry-standard penetration testing methodologies, frameworks, and tools
Nice to have:
Offensive Security Certified Professional (OSCP). Additional advanced cybersecurity certifications, including OSCE, GWAPT, GXPN, or CISSP, are a plus.
Benefits
Health, Dental & Vision Insurance (premiums paid up to 99% for employee coverage)
Options include PPO, HDHP, HMO and ACO
Multiple carrier options
FSA (dependent and medical), HSA options (for qualified plans) and supplemental insurance options
$10,000 employer-paid Life Insurance & AD&D (employees have the option to buy up)
Paid holidays
Paid time off
Paid sick leave
Flexible “hybrid” work environment
Retirement plan (401K)
Professional training & development opportunities
Important Details
Schedule: Full-Time
Contract: Regular, Exempt
Travel: Occasional travel required for client engagements, meetings, or other business needs (up to 5%)
Occasional testing outside of regular business hours, including evenings and weekends, may be required based on client needs and engagement requirements
Physical Requirements
Ability to spend prolonged periods of time standing, speaking, walking, driving, and/or sitting
Requires ability to occasionally lift up to 25lbs
Reasonable accommodation may be made to enable individuals with disabilities to perform the essential requirements
About the Company
FIT Solutions is an innovative national IT and Cybersecurity Services firm focused on creating a culture of elite raving fans for its employees that solves business problems for clients. The company is on a mission to impact the lives touched by technology, teaching and promoting individuals to set and achieve their personal, professional, and financial goals through their work together. Measuring results against best-in-class businesses, FIT Solutions is focused on hitting targets and is a humble and adaptable group of people who continue to train and role play daily in pursuit of their goals.
