Penetration Tester (Florida)
About Us
Packetlabs was built by an ethical hacker after seeing vulnerability assessments presented as penetration tests. Our slogan "Ready for more than a VA scan?" drives at the importance of not providing our clients with a false sense of security. We are a passionate team of highly trained, proactive, penetration testers. We provide expert-level penetration testing services that are thorough and tailored to help foster a safe digital space where everyone has the right to privacy and security. Packetlabs consultants find weaknesses others overlook and continuously learn new ways to evade controls. We hold ourselves to a very high standard and only hire individuals with the same drive and passion.
Core Values
- You have a customer-first mentality.
- You are a great communicator with clients, project managers, and teammates, ensuring rapid responses and on-time delivery.
- You deliver work that you take pride in—your work is an autograph of your excellence.
- You dig deeper into every finding and don’t stop until impact is proven.
- You are comfortable being uncomfortable, going towards obstacles rather than away from them. Consulting isn’t a typical job and requires adapting to rapidly changing environments.
- You are always learning. Cybersecurity changes every day, and you need to keep up or want to keep up. You are deeply aware of your skillset and willing to improve.
- You are self-motivated and dependable.
- You are humble. Egos don’t have a place at Packetlabs.
Requirements
- Solid working knowledge of programming languages, including C, C#, Python, Objective-C, Java, JavaScript, SQL, and frameworks like AngularJS.
- Familiarity with web services and data exchange formats such as XML, JSON, SOAP, REST, and AJAX.
- Understanding of AI/LLM weaknesses and flaws in applications.
- Extensive experience/expertise in using an attack proxy (e.g., Burp Suite).
- Preferred: 3–5 years of experience working in penetration testing and consulting.
- A graduate of a post-secondary college or university degree program.
- At least two years of experience dealing with information security-related tasks.
- Professional qualifications (one or more): OSCP, OSWE, BSCP. OSCP or Burp certification is mandatory for our organization.
- You must be located in Florida.
Responsibilities
- Perform penetration testing of web applications, mobile applications, thick clients, and APIs.
- Conduct source code review and whitebox penetration testing to prove the impact of application flaws.
- Reverse engineering of mobile and thick client applications.
- Chain application flaws to other areas, such as cloud and on-prem AD infrastructure (opportunities for lateral movement into infrastructure teams are limited and given at the manager’s discretion).
- Develop detailed reports on findings and remediations for impactful findings, including debriefing at both technical and executive levels.
- Perform SAST and DAST on enterprise, SaaS, and custom in-house applications.
- Use scanners and validate/eliminate false positives.
- Demonstrate a strong understanding of OWASP in Web, API, Mobile, and AI/LLM, with the ability to go beyond standard practices.
Benefits
- Amazing team and working environment.
- Competitive compensation and pay for performance.
- Employee growth and development.
- Fully remote (in Florida).
This position is at-will, and this job posting does not constitute an employment contract or guarantee of continued employment.