Penetration Tester (Texas)

About the role

Packetlabs was built by an ethical hacker after seeing vulnerability assessments presented as penetration tests. Our slogan "Ready for more than a VA scan?" drives at the importance of not providing our clients with a false sense of security. We are a passionate team of highly trained, proactive, penetration testers. We provide expert-level penetration testing services that are thorough and tailored to help foster a safe digital space where everyone has the right to privacy and security.

Core Values

• You have a customer-first mentality.
• You are a great communicator with clients, project managers, and teammates, ensuring rapid responses and on-time delivery.
• You deliver work that you take pride in—your work is an autograph of your excellence.
• You dig deeper into every finding and don’t stop until impact is proven.
• You are comfortable being uncomfortable, going towards obstacles rather than away from them. Consulting isn’t your typical job and requires adapting to rapidly changing environments.
• You are always learning. Cybersecurity changes every day, and you need to keep up or want to keep up. You are deeply aware of your skillset and willing to improve.
• You are self-motivated and dependable.
• You are humble. Egos don’t have a place at Packetlabs.

Requirements

• Solid working knowledge of programming languages, including C, C#, Python, Objective-C, Java, JavaScript, SQL, and frameworks like AngularJS.
• Familiarity with web services and data exchange formats such as XML, JSON, SOAP, REST, and AJAX.
• Understanding of AI/LLM weaknesses and flaws in applications.
• Extensive experience/expertise in using an attack proxy (e.g., Burp Suite).
• Preferred: 3–5 years of experience working in penetration testing and consulting.
• A graduate of a post-secondary college or university degree program.
• At least two years of experience dealing with information security-related tasks.
• Professional qualifications (one or more): OSCP, OSWE, BSCP. OSCP or Burp certification is mandatory for our organization.
• You must be located in Texas.

Responsibilities

• Perform penetration testing of web applications, mobile applications, thick clients, and APIs.
• Conduct source code review and whitebox penetration testing to prove the impact of application flaws.
• Reverse engineering of mobile and thick client applications.
• Chain application flaws to other areas, such as cloud and on-prem AD infrastructure (opportunities for lateral movement into infrastructure teams are limited and given at the manager’s discretion).
• Develop detailed reports on findings and remediations for impactful findings, learning to debrief these at both a technical and executive level.
• Perform SAST and DAST on enterprise, SaaS, and custom in-house applications.
• Use scanners and validate/eliminate false positives.
• Demonstrate a strong understanding of OWASP in Web, API, Mobile, and AI/LLM, going beyond baseline expectations.

Benefits

• Amazing team and working environment.
• Competitive compensation and pay for performance.
• Employee growth and development.
• Fully remote (in Texas).

This position is at-will, and this job posting does not constitute an employment contract or guarantee of continued employment.