Penetration Tester (W-2 or 1099 | U.S.-Based) jobs in United States
cer-icon
Apply on Employer Site
company-logo

RSI Security · 1 month ago

Penetration Tester (W-2 or 1099 | U.S.-Based)

RSI Security is a cybersecurity advisory firm dedicated to helping organizations secure their environments. They are seeking a highly skilled Penetration Tester to execute advanced manual penetration testing and support client engagements, delivering accurate and validated reporting.

Cyber SecurityInformation Technology
check
Growth Opportunities
badNo H1BnoteU.S. Citizen Onlynote

Responsibilities

Manual Internal and External Penetration Testing
Internal Segmentation Testing (lateral movement, trust boundary analysis)
Web Application Penetration Testing (OWASP Top 10, business logic flaws)
Mobile Application Penetration Testing (Android/iOS)
API Penetration Testing (auth flows, token abuse, endpoint assessment)
Social Engineering Penetration Testing (phishing, vishing, pretexting)
Hardware/IoT Penetration Testing as needed
Create detailed, validated, and remediation-focused penetration testing reports
Present findings to both technical and non-technical stakeholders
Maintain alignment with industry standards (NIST, PTES, OWASP, MITRE, etc.)

Qualification

Penetration TestingBurp SuiteNmapMetasploitAPI TestingWeb Application TestingMobile Application TestingSocial EngineeringReporting SkillsClient CommunicationOWASPIndependent WorkDocumentation Skills

Required

3–7+ years of penetration testing experience
Full-stack offensive testing skills (network, web, mobile, API, IoT, SE)
Proficiency with Burp Suite, Nmap, Nessus, Metasploit, Wireshark, etc
Strong reporting and documentation skills
Excellent client-facing communication
Familiarity with OWASP, PTES, NIST SP 800-115, OSSTMM
Ability to work independently
Must be able to travel within the United States (non-negotiable)
Must be U.S.-based

Benefits

Unlimited flex vacation
Paid parental leave
401(k) with 100% employer match
Medical, dental, vision coverage
Professional development & certification reimbursement
Remote-first culture

Company

RSI Security

twittertwittertwitter
company-logo
RSI Security is a cyber-security-focused technology company that helps private and public sector organizations.

Funding

Current Stage
Growth Stage

Leadership Team

leader-logo
John Shin
Managing Director
linkedin
Company data provided by crunchbase