Principal PenTester (Remote – WebApp focus)
Location:
Remote (UK, USA or Latin America based candidates only)
Salary:
DOE + Benefits
Contract Type:
Remote (UK, USA or Latin America based candidates only)
Company: Confidential Specialist Security Consultancy
Location: Remote (UK, USA or Latin America based candidates only)
Position: Penetration Tester
Level: Mid level to Principal Consultant
Salary: Competitive, dependent on experience
Background
A specialist penetration testing consultancy is seeking an experienced penetration tester with a primary focus on application security testing, alongside exposure to infrastructure penetration testing. The company is small, highly specialised, and focused on delivering high quality offensive security services.
The role offers hands-on technical work, problem solving, and close collaboration with skilled security professionals in a supportive environment.
Perks
Fully remote working
Flexible working hours
Unlimited paid time off
Training and conference budget
Medical and dental benefits (for US employees)
Strong engineering led culture focused on growth and development
Opportunity to work with a highly capable and collaborative team
High customer satisfaction and repeat client base
Requirements
Strong experience delivering complex application penetration tests across common web technologies
Broad skillset with the ability to support additional assessments such as internal networks, cloud, red teaming, mobile, or social engineering
Ability to produce clear, professional penetration test reports
Comfortable presenting findings to both technical and non technical stakeholders
Nice to Have
Experience leading penetration tests end to end, from scoping through delivery
Published security research, CVEs, or open source tooling
Active involvement in security projects, CTFs, or the wider offensive security community
Ability to read and write code in common programming languages
Strong written and verbal communication skills
Degree in Computer Science or a related discipline
Completion of relevant security courses, books, or MOOCs
Industry recognised certifications such as OSCP, OSCE, OSWA, OSWE, CRTO, BSCP, or similar

