Job Description
Security Engineer – Penetration Testing Location: Minneapolis, MN (Remote) Duration: Longterm Pay Rate: $60/hr on W2 Relevant certifications such as OSCP, OSCE, OSWE, or CISSP Key Responsibilities Conduct end-to-end penetration testing engagements, including scoping, exploitation, validation, and reporting Perform security assessments on web applications, APIs, and enterprise systems Identify and evaluate vulnerabilities including OWASP Top 10 risks, authentication/authorization weaknesses, and injection flaws Utilize security testing tools such as Burp Suite, Nmap, and exploitation frameworks Develop scripts and automation using Python or Go to improve testing efficiency Document findings clearly and provide actionable remediation recommendations Partner with engineering teams to validate fixes and improve system security Support proactive risk identification and threat modeling activities Assist with vulnerability triage and bug bounty program support Contribute to improving penetration testing methodologies, tooling, and processes Provide technical guidance and mentorship to junior team members when needed Required Qualifications Bachelor’s degree in Computer Science, Cybersecurity, or equivalent practical experience 10+ years of cybersecurity experience with progressive responsibility in penetration testing 7+ years of hands-on penetration testing experience focused on web applications and APIs within enterprise environments Strong experience executing the full penetration testing lifecycle from scoping through reporting Deep understanding of web application security vulnerabilities including OWASP Top 10 Expertise in authentication, authorization, and injection attack testing Advanced proficiency with Burp Suite, Nmap, and common exploitation frameworks Experience scripting or automating tasks using Python or Go Excellent documentation and communication skills Proven experience collaborating with engineering teams on remediation efforts Preferred Qualifications Experience testing mobile applications, embedded systems, or third-party/vendor platforms Familiarity with PCI penetration testing requirements and compliance frameworks Experience supporting bug bounty programs including triage and validation Exposure to threat modeling and proactive risk assessments Experience mentoring or guiding security testers Strong understanding of networking and enterprise system architecture Experience improving or automating penetration testing processes and tooling Relevant certifications such as OSCP, OSCE, OSWE, or CISSP