RSI Security · 2 months ago
Penetration Tester (W-2 or 1099 | U.S.-Based)
RSI Security is a cybersecurity advisory firm dedicated to helping organizations secure their environments and reduce risk. They are seeking a highly skilled Penetration Tester to execute advanced manual penetration testing across multiple disciplines and support client engagements both remotely and onsite.
Cyber SecurityInformation Technology
Responsibilities
Manual Internal and External Penetration Testing
Internal Segmentation Testing (lateral movement, trust boundary analysis)
Web Application Penetration Testing (OWASP Top 10, business logic flaws)
Mobile Application Penetration Testing (Android/iOS)
API Penetration Testing (auth flows, token abuse, endpoint assessment)
Social Engineering Penetration Testing (phishing, vishing, pretexting)
Hardware/IoT Penetration Testing as needed
Create detailed, validated, and remediation-focused penetration testing reports
Present findings to both technical and non-technical stakeholders
Maintain alignment with industry standards (NIST, PTES, OWASP, MITRE, etc.)
Qualification
Required
3–7+ years of penetration testing experience
Full-stack offensive testing skills (network, web, mobile, API, IoT, SE)
Proficiency with Burp Suite, Nmap, Nessus, Metasploit, Wireshark, etc
Strong reporting and documentation skills
Excellent client-facing communication
Familiarity with OWASP, PTES, NIST SP 800-115, OSSTMM
Ability to work independently
Must be able to travel within the United States (non-negotiable)
Must be U.S.-based
Benefits
Unlimited flex vacation
Paid parental leave
401(k) with 100% employer match
Medical, dental, vision coverage
Professional development & certification reimbursement
Remote work
Access to RSI standards and methodologies
Long-term contracting potential
Company
RSI Security
RSI Security is a cyber-security-focused technology company that helps private and public sector organizations.
Funding
Current Stage
Growth StageRecent News
2025-02-25
Company data provided by crunchbase