Description
Contract Penetration Tester
At Bishop Fox, security isn't just a job—it's our passion. As leaders in continuous offensive security and penetration testing, we deliver world-class customer experiences. Trusted by over a quarter of the Fortune 100, half of the Fortune 10, and top global media companies, we help safeguard digital landscapes. Our Cosmos platform, honored as Best Emerging Technology by SC Media, exemplifies our commitment to innovation.
Joining Bishop Fox means collaborating with a curious and dedicated team. You'll tackle complex challenges for some of the world's most recognized organizations, securing their networks against real-world threats. With nearly 20 years of industry contributions—including 16 open-source tools and 50 security advisories published in the past five years—we're committed to making the digital world safer.
We’re looking for talented, experienced professional hackers to help us secure some of the world’s most complex software and sophisticated technologies. You’ll be working alongside our US and internationally-based teams supporting clients across multiple industries.
Responsibilities
Bishop Fox is looking for experienced contract penetration testers with a primary focus in web application security and strong secondary expertise in cloud, mobile, source code, network, or AI/LLM security.
You’ll work on a range of projects, from short-term assessments to longer-term program engagements with well-established clients. In this role, you’ll identify vulnerabilities, validate risk, develop creative solutions, and clearly communicate findings and remediation guidance to both technical and executive stakeholders. As a trusted advisor, you’ll help clients understand risk and make informed security decisions.
Experience
- 5+ years of experience planning, conducting, and managing web application penetration tests
- Deep understanding of application security fundamentals, OWASP Top 10, common vulnerabilities, and secure development best practices
- Experience assessing vulnerabilities and developing exploits across diverse targets
- Strong understanding of system and network security, authentication protocols, security protocols, and applied cryptography
- Ability to communicate complex technical findings clearly and provide practical remediation guidance to technical and executive audiences
Preferred Experience
Deep experience in at least one of the following:
- Cloud Security - Experience assessing AWS cloud environments, including technologies such as IAM, EC2, VPC, EBS, S3, CloudWatch, and Lambda.
- Mobile Application Security - Experience testing iOS and/or Android applications, including mobile application architecture, API communication, data storage, authentication flows, and common mobile security vulnerabilities.
- Source Assisted Application Assessments: Experience evaluating applications across multiple layers, including source code, APIs, infrastructure, and integrations. Strong proficiency in Golang is highly preferred, along with familiarity in languages such as Python, Ruby, PowerShell, Java, and JavaScript.
- Network Security - Experience with network and system exploitation, including modern tactics, techniques, and procedures such as C2 frameworks, EDR bypass, privilege escalation, password cracking, and lateral movement.
- AI/LLM Security - Experience assessing non-deterministic security controls.
Employment Sponsorship
This engagement is for independent contractors (1099) and is not eligible for any form of employment sponsorship. Applicants must be legally authorized to work in the United States without requiring visa sponsorship now or in the future. Applicants must be located in the United States.
All new hires must pass a background check as a condition of employment.
Bishop Fox is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status, or any other characteristic protected by applicable federal, state, or local law.
Similar jobs
Est. 120,000 USD
At Bishop Fox, security isn't just a job—it's our passion. As leaders in continuous offensive security and penetration testing, we deliver world-class customer experiences. Trusted by over a quarter of the Fortune 100, h…
Est. 120,000 USD
At Bishop Fox, security isn't just a job—it's our passion. As leaders in continuous offensive security and penetration testing, we deliver world-class customer experiences. Trusted by over a quarter of the Fortune 100, h…
Est. 140,000 USD
At Bishop Fox, security isn't just a job—it's our passion. As leaders in continuous offensive security and penetration testing, we deliver world-class customer experiences. Trusted by over a quarter of the Fortune 100, h…
Est. 120,000 USD
At Bishop Fox, security isn't just a job - it's our passion. As leaders in continuous offensive security and penetration testing, we deliver world-class customer experiences. Trusted by over a quarter of the Fortune 100,…
Est. 120,000 USD
Bishop Fox is the leading authority in offensive security, providing solutions ranging from continuous penetration testing, red teaming, and attack surface management to product, cloud, and application security assessmen…
Est. 124,000 USD
At Bishop Fox, security isn't just a job—it's our passion. As leaders in continuous offensive security and penetration testing, we deliver world-class customer experiences. Trusted by over a quarter of the Fortune 100, h…
At Bishop Fox, security isn't just a job - it's our passion. As leaders in continuous offensive security and penetration testing, we deliver world-class customer experiences. Trusted by over a quarter of the Fortune 100,…
Est. 120,000 USD
Most companies claim to have the best people. We say to them, "Keep dreaming." Our people are second to none. They set us apart with their entrepreneurial spirit and ambition. They come to us from the likes of Amazon, Mi…
Truveta provides unprecedented real-world data and real-time intelligence, powered by a dataset built with and owned by US health systems united in a mission of Saving Lives with Data. Together, we power breakthrough med…
Black Duck Software, Inc. helps organizations build secure, high-quality software, minimizing risks while maximizing speed and productivity. Black Duck, a recognized pioneer in application security, provides SAST, SCA, a…
Est. 124,000 USD
At Dragos, the mission is personal. The systems we protect deliver the water you drink, power your home, and keep the hospitals your community depends on running. Those critical infrastructure systems that power our civi…
Est. 125,000 USD
For more than two decades, Bishop Fox has defined the forefront of offensive security. By combining elite human expertise with the power of its proprietary Cosmos AI engine, the firm delivers industry-leading cloud and a…
Est. 80,000 EUR
At Cision, we believe in empowering every individual to make an impact. Here, your voice is heard, your ideas are valued, and your unique perspective fuels our collective success. As part of our global team, you'll thriv…
Black Duck Software, Inc. helps organizations build secure, high-quality software, minimizing risks while maximizing speed and productivity. Black Duck, a recognized pioneer in application security, provides SAST, SCA, a…
Est. 160,000 USD
Founded in 2004, NetBrain is the leader in no-code network automation. Its ground-breaking Next-Gen platform provides IT operations teams with the ability to scale their hybrid multi-cloud connected networks by automatin…
Est. 165,000 USD
At Dragos, the mission is personal. The systems we protect deliver the water you drink, power your home, and keep the hospitals your community depends on running. Those critical infrastructure systems that power our civi…
Est. 137,500 USD
Dark Wolf is actively seeking an experienced Penetration Tester to join our innovative team. This individual will play a critical role in assessing and enhancing the security of various products, including hardware, soft…
Est. 140,000 USD
About Surefire Cyber Surefire Cyber is redefining the incident response model by delivering a swifter, stronger response to cyber incidents such as ransomware, email compromise, malware, data theft, and other threats. Ou…
Est. 184,700 USD
At Accenture Federal Services, nothing matters more than helping the US federal government make the nation stronger and safer and life better for people. Our 13,000+ people are united in a shared purpose to pursue the li…
Est. 165,000 USD
Who You Are You are ambitious, curious, and passionate about cybersecurity with at least 10 years of experience in network engineering and security. You are confident in your technical skills and equally strong in connec…
Est. 163,700 USD
At Accenture Federal Services, nothing matters more than helping the US federal government make the nation stronger and safer and life better for people. Our 13,000+ people are united in a shared purpose to pursue the li…
Est. 262,500 USD
Who You Are You’re a strategic security leader who connects business risk, regulatory needs and technology into cohesive multi-domain security solutions. You’re comfortable leading executive-level discoveries and influen…
Est. 262,500 USD
Who You Are You’re a strategic security leader who connects business risk, regulatory needs and technology into cohesive multi-domain security solutions. You’re comfortable leading executive-level discoveries and influen…
Est. 262,500 USD
Who You Are You’re a strategic security leader who connects business risk, regulatory needs and technology into cohesive multi-domain security solutions. You’re comfortable leading executive-level discoveries and influen…
Est. 262,500 USD
Who You Are You’re a strategic security leader who connects business risk, regulatory needs and technology into cohesive multi-domain security solutions. You’re comfortable leading executive-level discoveries and influen…
Est. 262,500 USD
Who You Are You’re a strategic security leader who connects business risk, regulatory needs and technology into cohesive multi-domain security solutions. You’re comfortable leading executive-level discoveries and influen…
Est. 15,000 USD
OPSWAT, a global leader in IT, OT, and ICS critical infrastructure cybersecurity, delivers an end-to-end platform that gives public and private sector organizations and enterprises the critical advantage needed to protec…
Est. 262,500 USD
Who You Are You’re a strategic security leader who connects business risk, regulatory needs and technology into cohesive multi-domain security solutions. You’re comfortable leading executive-level discoveries and influen…
Est. 140,000 USD
The Nuclear Company is the fastest growing AI tech-enabled startup in the nuclear and energy space, pioneering a fleet-scale approach to building the next generation of nuclear reactors. Through our design-once, build-ma…
Est. 120,000 USD
Freedom Technology Solutions Group is seeking a Cyber Security Project Engineer to add to our team located in Herndon, VA! The team provides a highly technical and in-depth penetration testing service, in support of ente…