Skip to main content
CareerApp

Skill

Penetration Testing

Cybersecurity

Penetration testing (pen testing) is a cybersecurity practice in which ethical hackers simulate real-world attacks on a system, network, or application to identify exploitable vulnerabilities before malicious actors do. It is performed by security professionals using tools like Metasploit, Burp Suite, and Nmap, and is often required for regulatory compliance in industries handling sensitive data.

Penetration Testing in the job market

Last checked October 28, 2026

Open roles
23

on Career App

Employers
17

hiring for it

Median pay
—

not enough disclosed

Disclose pay
—

of these roles

Open roles requiring Penetration Testing (23)

INFORMATION TECHNOLOGY SPECIALIST (INFOSEC)

Defense Counterintelligence and Security Agency

Huntsville, AL · $110,401 – $144,102

The Defense Counterintelligence and Security Agency seeks an information security professional to oversee compliance and technical controls at defense contractors' cleared facilities, using the Risk Management Framework to assess systems that handle classified information. This role combines technical security expertise with stakeholder engagement across multiple contractor sites nationwide.

Via USAJOBS · Apply there ↗

IT SPECIALIST (INFOSEC/PLCYPLN)

United States Fleet Forces Command

Fort Meade Naval Facilities, Maryland · $121,785 – $158,322

This federal cybersecurity role involves conducting independent security assessments and vulnerability testing on military information systems and networks to ensure compliance with security policies and frameworks. The position suits experienced IT security professionals who can evaluate security controls, document risks, and work with system owners to improve defensive posture.

Via USAJOBS · Apply there ↗

IT Cybersecurity Specialist (DEV/DTA)

U.S. Secret Service

Washington, DC · $143,913 – $187,093

This U.S. Secret Service role combines software development with database administration and cybersecurity oversight, suited for someone who can architect and secure applications while also managing data systems and leading security assessments.

Via USAJOBS · Apply there ↗

Manager, Security Engineering

Cohere

Full-time · United States, Canada · CA$320,000 – CA$385,000

Cohere is seeking a security engineering manager to build and oversee a team implementing application security practices across their AI platform, from vulnerability management and code scanning to penetration testing and secure development integration. This role suits experienced security professionals who can lead technically while translating security concerns for business stakeholders.

Listed on Cohere’s careers site · Apply there ↗

Palantir

Offensive Security Engineer

Palantir

Full-time · Washington, DC · $145,000 – $200,000

This role involves testing Palantir's products and infrastructure for security vulnerabilities by simulating real-world attacks, then working with engineering teams to remediate findings. It suits experienced security professionals who can identify attack chains, design offensive tooling powered by AI, and coordinate third-party penetration testing engagements.

Listed on Palantir’s careers site · Apply there ↗

American International Group

Database Security Engineer

American International Group

This role involves designing and managing database security systems to protect AIG's data assets, working across teams to implement security controls and compliance measures. It suits experienced security engineers who understand database platforms deeply and can balance technical expertise with stakeholder collaboration in a regulated financial environment.

Listed on American International Group’s careers site · Apply there ↗

AeroVironment

Computer Network Defense Analyst (CNDA) Level 3

AeroVironment

Full-time · Jessup, MD · $83,500 – $210,000

This role defends critical military and government systems against cyberattacks by analyzing network traffic, conducting security assessments, and responding to active threats. It suits experienced cybersecurity professionals with deep knowledge of network defense and the clearance to work on sensitive defense projects.

Listed on AeroVironment’s careers site · Apply there ↗

Offensive Security Engineer

LSEG

This role leads vulnerability discovery and offensive security testing programmes across a major financial services organisation, coordinating with third-party vendors and internal teams to validate findings and drive remediation at scale. It suits someone with hands-on penetration testing or red team experience who can bridge technical depth with programme management and wants to shape security strategy in a large enterprise.

Listed on LSEG’s careers site · Apply there ↗

Senior Cybersecurity Engineer

Rogue Fitness

Columbus, OH

This hands-on security operations role involves administering and tuning firewalls, cloud security controls, and endpoint detection tools while leading incident response and threat hunting. It suits someone who enjoys building and running security systems across multiple platforms and prefers implementation work over pure policy or architecture.

Listed on Rogue Fitness’s careers site · Apply there ↗

Red Team Engineer, Safeguards

Menlo Ventures Portfolio

Full-time · San Francisco, CA · $320,000 – $405,000 · Remote

This role involves adversarial testing of AI systems and products to identify vulnerabilities before they can be exploited. It suits security professionals who want to shift their expertise toward novel threats in AI, combining traditional penetration testing with emerging safety challenges unique to large language models and agentic systems.

Listed on Menlo Ventures Portfolio’s careers site · Apply there ↗

View all 23 on Jobs

Asked for alongside Penetration Testing

Measured from the 23 open roles that name Penetration Testing — not from a curated list.

Employers hiring for Penetration Testing

17 in total, most open roles first.

Turn on analytics and we load Google Analytics: Google gets the pages you open and what you do here — searches, jobs you view, jobs you apply to — and sets its own cookies. Leave it off and the only cookies we set are your login, your theme, and this answer. Accept All also records a yes to advertising, which nothing uses yet. Privacy Policy.