Penetration Tester Jobs

WPP is the trusted growth partner for the world’s leading brands. We unite cutting-edge media intelligence and data solutions, world-class creativity, next-generation production, transformative enterprise solutions and expert strategic counsel in a single company – powered by exceptional talent and our agentic marketing platform, WPP Open, to help our clients navigate change, capture opportunity and deliver transformational growth. We work with the world's most valuable brands and have global reach across 100+ markets, with deep local expertise. Our people are the key to our success. We're committed to fostering a culture of creativity, belonging and continuous learning, attracting and developing the brightest talent, and providing exciting career opportunities that help our people grow. For more information, visit WPP.com. Department: Data & Technology Solutions (DTS) Reports To: SVP Security and Compliance Location: [London/Hybrid 2 days a week in office] Position Type: Full-Time Role Overview The Product, Application and Offensive Security Engineer is responsible for embedding security directly into the design, development, testing, and operation of DTS products and platforms. This is a hands-on security engineering role. The role requires someone who can work directly with product and engineering teams, review designs, assess APIs, run threat models, test systems, coordinate penetration test

SPECIFIC JOB RESPONSIBILITIES Deliver offensive security services in the following areas including network, cloud, mobile application, web application, and artificial intelligence (AI) and wireless penetration testing and related technical security assessments. Collaborate with clients, project management, and engagement leaders to identify, develop, and obtain information for developing approach proposals. Assist in the development of best practices, strategies, methodologies, and documentation/templates for use by the penetration testing team. Achieve high levels of client satisfaction on all engagements by meeting or exceeding client expectations set by engagement leaders and project managers. Provide thought leadership through the delivery of webinars, participation in industry groups and authoring technical blog articles and case studies. Work in collaboration with penetration testing leadership to continue to update and mature capabilities. Mentor and develop junior penetration testers, advancing their consulting skills, tradecraft, and technical knowledge. Billable hours target: 1664 hours annually (equivalent to 80 % utilization) Requirements EXPERIENCE REQUIRED 5-10 years’ experience delivering offensive security services in at least two of the following areas, including network, cloud, mobile application, web application, and/or artificial intelligence (AI) penetration testing and related technical securi

POSITION SUMMARY [update per job] SPECIFIC JOB RESPONSIBILITIES [update per job] Requirements EXPERIENCE REQUIRED [update per job] QUALIFICATIONS, SKILLS, & KNOWLEDGE [update per job] PROFESSIONAL DEVELOPMENT EXPECTATIONS [update per job] The base salary range for this role is $[update per job]. Base salary is part of our total rewards package which also includes the opportunity for merit-based salary increases, eligibility for our 401(k) plan, medical, dental, vision, life and disability insurances and leaves provided in line with your work state. Our robust time-off policy includes flexible paid time off, 11 paid holidays, and paid sick time. Total compensation, including base salary to be offered, will depend on elements unique to each candidate, including applicable candidate experience, skills, education and other factors permitted by law. Disclaimer: The above statements are intended to describe the general nature and level of work being performed by people assigned to this position. They are not to be construed as an exhaustive list of all responsibilities, duties, and skills required of colleagues in the role. All colleagues may be required to perform duties outside of their normal responsibilities from time to time, as needed. Clearwater is committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. Please inform Clearwater/Redspin’s Re

At Snowflake, we are powering the era of the agentic enterprise. To usher in this new era, we seek AI-native thinkers across every function who are energized by the opportunity to reinvent how they work. You don’t just use tools; you possess an innate curiosity, treating AI as a high-trust collaborator that is core to how you solve problems and accelerate your impact. We look for low-ego individuals who thrive in dynamic and fast-moving environments and move with an experimental mindset — who rapidly test emerging capabilities to discover simpler, more powerful ways to deliver results. At Snowflake, your role isn't just to execute a function, but to help redefine the future of how work gets done. There is only one Data Cloud. Snowflake’s founders started from scratch and designed a data platform built for the cloud that is effective, affordable, and accessible to all data users. But it didn’t stop there. They engineered Snowflake to power the Data Cloud, where thousands of organizations unlock the value of their data with near-unlimited scale, concurrency, and performance. This is our vision: a world with endless insights to tackle the challenges and opportunities of today and reveal the possibilities of tomorrow. Snowflake started with a clear vision: develop a cloud data platform that is effective, affordable, and accessible to all data users. Snowflake developed an innovative new product with a built-for-the-cloud architecture that combines the power of data warehousing, t

SIXGEN’s mission is to deliver agile, mission-ready cybersecurity solutions that empower government and critical infrastructure organizations to stay ahead of advanced cyber threats. We combine innovation, deep expertise, and cutting-edge capabilities to uncover vulnerabilities, protect vital systems, and ensure operational superiority in an ever-evolving digital landscape. POSITION OVERVIEW Position: Senior Web Application Penetration Tester Job Type: Full-time Location: Remote Clearance Requirements: Must be able to obtain a Secret Clearance Travel Requirements: Up to 10% Experience: 5+ years Salary :$125-$165K WHAT YOU'LL DO We are seeking a skilled and motivated Senior Web Application Penetration Tester to join our growing cyber operations team. The ideal candidate will possess deep expertise in web application security testing, vulnerability research, and exploitation techniques, with the ability to identify complex attack paths and develop creative solutions to challenging security problems. This role goes far beyond automated scanning. Successful candidates will conduct in-depth assessments of web applications, APIs, mobile applications, and supporting infrastructure while leveraging custom tooling, manual testing techniques, and advanced exploitation methodologies to uncover impactful security findings. KEY RESPONSIBILITIES Web Application Security Assessments Conduct penetration testing of web applications, APIs, mobile applications, databases, and client-side

About the team Preparedness is a critical Safety Research team at OpenAI, which is focused on mitigating AI threats to global security that could scale to an extreme level of severity. Our work involves: Measurement. Monitoring and predicting the evolving capabilities of frontier AI systems. Mitigation. Keeping misuse safeguards, alignment tools, and security measures on track to adequately address extreme threats that might arise in the future. Coordination. Setting mitigation targets by maintaining OpenAI’s preparedness framework , and partnering with other staff to achieve these targets. This is urgent, fast-paced work that has far-reaching implications for the company and for society. About the role The stakes of securing OpenAI increases as our internal coding and research becomes increasingly driven by autonomous AI agents. Compromising these agents could allow a cyber threat actor to compromise many other parts of the company. In this role, you would lead Preparedness work defending the security of our internal AI agents against insiders, Advanced Persistent Threats (APTs), or powerful AI agents. We’re looking for a strong hands-on technical executor with experience working directly with advanced cyber threat actors. In this role, you will: Develop and maintain threat models via which advanced attackers could compromise our coding assistants and automated security systems. Identify security investments that are especially critical to make in advance; for example, prior

About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the role Data Center Security Engineering (DCSE) secures Anthropic's data center footprint; this role covers how the sites are designed and built to be secure. Much of that footprint is designed and built with partners, so a site's security is decided early: in what Anthropic hands the people who build it, and in how rigorously the delivered systems are tested against it. You'll design and specify the physical security systems for a site: perimeter and vehicle barriers, intrusion detection, video, security lighting, and the site penetrations and utility entry points that bypass them. Design firms and integrators produce the site drawings and install; you specify, review, and verify. You'll write the performance requirement and verification method behind each control, review every site design against them at each stage with redlines a design team can act on, test in the field that what was built performs as specified, and re-verify post-acceptance changes. This is a foundational role. You'll own Anthropic's physical security reference design package (typical details, reference drawings, schedules, and test procedures) in the form partners

Junior Consultant – Vulnerability Assessment, Penetration Testing & Red Teaming Location: Clearwater Pune, WFO Experience: 1–3 years Employment Type: Full-time Department: Cybersecurity / Information Security Reporting To: Senior Consultant / Team Lead About the Role Clearwater is looking for a Junior Consultant – Vulnerability Assessment, Penetration Testing (VAPT) & Red Teaming to join our consulting services team. The role will support the delivery of vulnerability assessments, penetration testing, application and infrastructure security assessments, and red team engagements for clients across different technology environments. The ideal candidate should have a strong foundation in cybersecurity, networking, operating systems and common security testing methodologies, along with a willingness to continuously learn and develop offensive security skills. Key Responsibilities Vulnerability Assessment & Penetration Testing Assist in conducting vulnerability assessments and penetration tests across: Web applications and APIs Mobile applications Network and infrastructure environments Cloud environments Internal and external networks Wireless environments, where applicable Perform reconnaissance, enumeration, vulnerability identification and validation. Identify and safely validate security weaknesses using manual and automated techniques. Assist with exploitation and post-exploitation activities under approved engagement scopes. Conduct

Our Purpose Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we’re helping build a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential. Title and Summary Senior Vulnerability Analyst Overview Mastercard is seeking a Senior Vulnerability Analyst to manage the Bug Bounty Program and perform advanced application security testing across web, mobile, and API environments. This role is responsible for validating externally reported vulnerabilities, conducting penetration testing, partnering with engineering teams on remediation, and helping strengthen Mastercard's security posture through proactive security assessments and vulnerability management. Role • Manage the Bug Bounty Program, including vulnerability intake, validation, triage, and researcher engagement. • Conduct penetration testing of web, mobile, and API-based applications. • Assess risk, prioritize findings, and provide remediation guidance. • Partner with product and engineering teams to drive timely remed

The VAPT Lead will be responsible for leading the vulnerability assessment and penetration testing (VAPT) initiatives across the organization. This role involves managing the entire VAPT process, from planning and scoping assessments to executing and reporting on findings. The VAPT Lead will collaborate with other cybersecurity teams to identify, assess, and mitigate vulnerabilities in the organization’s infrastructure, applications, and network environments. The VAPT Lead is a key player in improving the security posture of the organization by providing in-depth security testing and actionable insights to prevent potential cyber threats. Source: Adani Group | Job ID: 56580

Senior Space Red Team Operator SIXGEN's mission is to deliver agile, mission-ready cybersecurity solutions that empower government and critical infrastructure organizations to stay ahead of advanced cyber threats. We combine innovation, deep expertise, and leading technical capabilities to uncover vulnerabilities, protect vital systems, and strengthen operational resilience. POSITION OVERVIEW Position: Senior Space Red Team Operator Job Type: Full Time Location: Remote or Hybrid with travel to customer and test locations as required Clearance Requirement: Ability to obtain and maintain a U.S. Government security clearance; active Secret or higher preferred WHAT YOU'LL DO SIXGEN is seeking a hands-on Senior Space Red Team Operator to lead authorized adversarial assessments of space systems and the infrastructure that supports them. You will evaluate attack paths across spacecraft, payload, ground, cloud, mission-network, and operator environments; develop safe and repeatable test methods; and translate technical findings into clear mission risk and practical engineering improvements. This role is suited to an operator who can move comfortably between Linux hosts, cloud services, embedded targets, and customer briefings while maintaining disciplined authorization and mission-safety boundaries. Responsibilities include: Lead end-to-end red team assessments, penetration tests, and threat-informed adversary emulation against authorized space and mission systems. Develop assessment

Ready to do the most impactful work of your career? At Coinbase , we are uncompromising on our mission to increase economic freedom. The bar is high, the environment is intense, and we like it that way. This isn't a place for complacency, it’s a place to be pushed past your perceived limits. If you're ready to build the future of finance alongside people who refuse to settle for "good enough," you belong here. Coinbase is a remote-first, but not remote-only company. Expect to get together quarterly for intense in-person working sessions called “surges.” learn more about working at Coinbase . As an Offensive Security Engineer on the Application Security team within Security, you'll pioneer how Coinbase uses frontier AI models to scale vulnerability discovery, red team AI systems, and automate security workflows. This role bridges traditional penetration testing with next-generation AI-augmented offensive security, directly accelerating our ability to protect products and customers. You'll own the development of AI-driven security tooling and collaborate across Vulnerability Management, Offensive Security, and Incident Response to fundamentally shift how we operate. What you'll do: Build, deploy, and maintain custom security scanners that leverage frontier models to detect vulnerabilities at scale across Coinbase's product surface. Lead red teaming efforts against internal AI systems, including jailbreak testing, prompt injection analysis, and tool abuse simulation.

Who You Are You are a seasoned security professional with a deep passion for uncovering vulnerabilities and improving product security through technical assessments and hands-on penetration testing. You pride yourself on being able to execute sophisticated security tests, identify issues, and implement pragmatic solutions, all while keeping the customer experience central. You enjoy working collaboratively across teams and have the ability to communicate complex technical concepts in a clear, approachable manner. Who We Are The MongoDB Product Security organization is a diverse collection of individuals working together to scale MongoDB’s security, both security of the products themselves and the security features we offer to customers. The team is responsible for assessing the security of our products including MongoDB Atlas Cloud , Ops Manager , Kubernetes Operator , and the MongoDB Server ( Community and Enterprise editions). Our team provides assurance that new MongoDB products and features are built to meet our customers’ high security needs through rigorous threat modeling, code analysis, and penetration testing. The MongoDB Product Security organization works with software engineers to design, implement, and operate systems in a manner that protects our customers and their data. It is a multidisciplinary team that covers product, software, cloud, infrastructure, and operational security concerns. The Product Security team: Conducts rigorous penetration testing and secu

What We Do At GoGuardian, we’re helping build a future where all learners are ready and inspired to solve the world’s greatest challenges. Our award-winning system of learning solutions is purpose-built for K-12 and trusted by school leaders to promote effective teaching and equitable engagement while helping empower educators to keep students safe. What It’s Like to Work at GoGuardian We are an outcomes-focused learning company with a steadfast focus on improving learning environments, one classroom at a time. Working with us means joining a remote team of diverse, committed, mission-driven employees who are inspired by our vision, dedicated to our customers, and ready to roll up their sleeves. Guardians put their heads together to solve problems, learn together from experiments that fail, and stand together by their work with full accountability. We balance our diligence with an inclusive culture that invites everyone to bring their whole self to work. Join us and learn why “I love the people here” is one of the most frequent comments we hear from Guardians. The Role The Manager, New Business, will lead, coach, and develop a team of New Business Executives responsible for creating and closing strategic, new business within larger, complex K-12 accounts. Reporting to the Director of New Business, the leader will own team revenue performance, pipeline development, forecast accuracy, and execution of GoGuardian’s new-business strategy. This individual

To drive end-to-end sales, revenue growth, and business expansion for Pranaam Services by acquiring new customers, developing strategic partnerships, managing key accounts, and maximizing service penetration across individual, corporate, travel trade, airline, and hospitality segments. Source: Adani Group | Job ID: 56283