Perform comprehensive manual penetration tests across web, API, mobile, internal/external networks, Active Directory, and cloud environments. Validate vulnerabilities, produce technical and executive reports, and work with clients on remediation and retesting.
Job Description
Senior Penetration Tester
PlutoSec is a leading cybersecurity and penetration testing company delivering manual security assessments for organizations across the United States and Canada. We are looking for an experienced Penetration Tester to join our growing offensive security team.
Responsibilities
- Perform Web Application Penetration Testing
- Conduct API Security Assessments
- Mobile Application Security Testing (iOS & Android)
- Internal & External Network Penetration Testing
- Active Directory Security Assessments
- Cloud Security Assessments (Azure, AWS & GCP)
- Validate vulnerabilities manually using industry-leading tools
- Prepare professional technical and executive reports
- Work directly with clients during remediation and retesting
Requirements
- 3+ years of penetration testing experience
- Strong knowledge of OWASP Top 10 & API Security Top 10
- Experience with Burp Suite Professional, Nmap, Metasploit, Wireshark, Nessus, Invicti or Acunetix
- Experience with Active Directory, Windows & Linux
- Knowledge of Azure, AWS or Google Cloud
- Strong reporting and communication skills
- Relevant certifications such as OSCP, PNPT, CEH, CRTO, GPEN or equivalent are an asset
Preferred Skills
- Red Team Operations
- Web Application Security
- API Security Testing
- Cloud Security
- Malware Analysis
- Digital Forensics
- Source Code Review
- DevSecOps
Why Join PlutoSec?
- Work on enterprise penetration testing engagements
- Collaborative cybersecurity team
- Career growth and continuous learning
- Flexible work environment
- Exposure to modern attack techniques and security technologies
Similar Jobs
Cloud • Computer Vision • Information Technology • Sales • Security • Cybersecurity
Research and implement macOS detection techniques and build them into production endpoint sensor features. Drive projects from concept through release, collaborate cross-functionally, troubleshoot issues, and apply secure, high-performance engineering practices using Swift/C++ and related tools.
Top Skills:
AIBig-Data TelemetryC++Ci/CdEndpoint SecurityMacos ApisMacos SdksNetwork ExtensionObjective-CPythonSwift
Cloud • Information Technology • Security • Software • Cybersecurity
Lead Cloudflare through the CCCS CSP ITS assessment, maintain CCCS requirements in the common control framework, drive cross-functional security control implementation, improve security compliance maturity, shape security policy and governance, and work with auditors and regulators. Occasional travel required.
Top Skills:
CccsCccs Csp ItsCommon Control FrameworkFedrampHitrustIso 27000PbmmPci DssSoc 2
Artificial Intelligence • Cloud • Computer Vision • Hardware • Internet of Things • Software
Build and own technically complex, end-to-end full-stack features and platform capabilities for AI-driven IoT products. Define technical strategy, ship backend/frontend/mobile work, scale data ingestion and APIs, partner with product/design/customer teams, mentor engineers, and drive cross-team projects from ambiguous problems to measurable outcomes.
Top Skills:
CursorGoIotJavaScriptLlmsPythonReactTelematicsTypescript
What you need to know about the Vancouver Tech Scene
Raincouver, Vancity, The Big Smoke — Vancouver is known by many names, and in recent years, it has gained a reputation as a growing hub for both tech and sustainability. Renowned for its natural beauty, the city has become a magnet for professionals eager to create environmental solutions, and with an emphasis on clean technology, renewable energy and environmental innovation, it's attracted companies across various industries, all working toward a shared goal: advancing clean technology.
