Source Job

$104,000–$166,000/yr
US

  • Lead and execute comprehensive penetration testing and red team exercises across networks, applications, APIs, and AWS cloud environments.
  • Apply NIST SP 800-115, MITRE ATT&CK, and DHS RVA standards to deliver high-quality, risk-based security assessments.
  • Mentor junior penetration testers and collaborate with security and infrastructure teams to remediate vulnerabilities and strengthen security posture.

Penetration Testing Red Teaming MITRE ATT&CK AWS

12 jobs similar to Penetration Testing Lead

Jobs ranked by similarity.

$130,000–$142,000/yr
US

  • Plan and execute authorized red team assessments against government systems, applications, networks, APIs, and cloud environments.
  • Develop realistic attack scenarios aligned with MITRE ATT&CK and identify exploitable attack paths beyond automated scanning.
  • Document findings, provide remediation recommendations, and guide less-experienced testers through technical mentoring.

Valiant Solutions provides cybersecurity and IT services to federal civilian, defense, and national security customers nationwide. The firm is a multi-year Washington Business Journal Best Places to Work winner with a distributed, employee-centric culture.

$120,000–$150,000/yr
US

  • Lead advanced security assessments across web applications, APIs, cloud platforms, and enterprise networks.
  • Conduct red team activities, vulnerability research, and custom tool development to simulate real-world attacks.
  • Collaborate with cross-functional teams to assess risks, support remediation, and mentor colleagues.

Hitachi Vantara provides data infrastructure for global innovators across industries. As a diverse, global team, they foster an inclusive culture focused on making a real-world impact with data.

$115,000–$125,000/yr
US

  • Perform and lead penetration tests of customer systems to identify exploitable vulnerabilities.
  • Apply assessment methodologies including NIST SP 800-115, PTES, and OWASP WSTG.
  • Report and demonstrate findings directly to system owners and engineers.

Valiant Solutions delivers cybersecurity and IT services to federal civilian, defense, and national security customers nationwide. The company is a multi-year Washington Business Journal Best Places to Work winner with an employee-centric culture and a distributed workforce.

United States

  • Execute external network, web application, and API penetration testing engagements.
  • Identify, validate, and manually exploit vulnerabilities and assess attack paths.
  • Write clear client reports and communicate findings, risk, and remediation guidance.

We are A-LIGN, a technology-enabled cybersecurity company providing offensive and defensive security and compliance services trusted by more than 2,400 global organizations. We are a fast-paced, collaborative team supporting remote work and professional growth.

$112,500–$187,500/yr
US Unlimited PTO

  • Conduct comprehensive threat emulation exercises including red team, purple team, and penetration tests.
  • Collaborate with cross-functional teams to assess and improve security posture through adversary simulation.
  • Develop custom tools and document findings, risks, and recommendations for technical and business audiences.

TransUnion is a global information and insights company that helps consumers and businesses transact with confidence. With over 12,000 associates in more than 30 countries, it prioritizes work/life flexibility and a culture of innovation.

US

  • Execute internal network and cloud-based SaaS penetration testing engagements.
  • Identify, validate, and manually exploit vulnerabilities using public or custom-developed exploits.
  • Deliver clear, client-ready reports with actionable remediation guidance to client stakeholders.

Pathfynder by A-LIGN is a technology-enabled cybersecurity company providing offensive and defensive cybersecurity services under A-LIGN, a security and compliance partner trusted by more than 2,400 global organisations. The company works with organisations ranging from small businesses to global enterprises in a fast-paced, collaborative, and remote-first environment.

US

  • Execute external network, web application, and API penetration testing engagements.
  • Identify, validate, and manually exploit vulnerabilities while assessing business and technical risk.
  • Deliver client-ready reports and communicate remediation guidance to stakeholders.

Pathfynder by A-LIGN is a technology-enabled cybersecurity company providing offensive and defensive services. It is trusted by more than 2,400 global organizations and offers a fast-paced, collaborative remote culture.

US Unlimited PTO

  • Lead red team assessments and adversary emulation for space and mission systems.
  • Develop attack plans, test cases, and Rules of Engagement with safety boundaries.
  • Assess Linux, embedded, cloud, and network systems for exploitable weaknesses.

SIXGEN delivers agile, mission-ready cybersecurity solutions for government and critical infrastructure organizations. The company combines innovation and deep technical expertise to uncover vulnerabilities and strengthen operational resilience.

$105,820–$135,420/yr
North America

  • Conduct manual pentests on core systems and AI agents, building automation to expand coverage.
  • Define how we pentest AI, including LLM applications and agent-generated code.
  • Triage SAST findings, review code across web/APIs/AWS, and communicate risk to engineers.

We are a financial technology company based in Boston, unlocking capital for small businesses across America with fast, flexible funding. Our remote-first team, recognized as a Best Place to Work, has provided over $4.8 billion to more than 92,000 small businesses since 2012.

Turkey

  • Perform web, mobile application, and internal penetration tests, source code reviews, and threat analysis.
  • Support blue teams, research new attack vectors, and stay current with cybersecurity news and trends.
  • Train QA and Development teams in standard security testing techniques and secure software development.

Insider One is a platform that unifies marketing and customer engagement tools, powered by AI and an integrated Customer Data Platform. The company is a woman-founded, women-led B2B SaaS unicorn with 1,500+ team members from 50+ nationalities across 30+ offices.

Latin America

  • Emulate external attackers, malicious insiders, compromised identities, and autonomous adversarial agents.
  • Validate vulnerabilities and configuration weaknesses to determine practical exploitability and develop realistic attack paths across web, cloud, identity, and infrastructure.
  • Conduct purple-team exercises and translate offensive findings into actionable improvements for detection and response.

Backblaze is the object storage leader in the open cloud movement, providing cloud storage services to businesses, developers, and individuals. Founded in 2007 and publicly traded since 2021, the company generates over $136M in annual recurring revenue, manages over three billion gigabytes of data for 500K+ customers in 175+ countries, and fosters a culture centered on diversity, equity, and inclusion.

$230,000–$275,000/yr
US

  • Research and reproduce high-consequence vulnerabilities across enterprise networks, applications, identity systems, and cloud environments.
  • Turn vulnerability research and attacker tradecraft into safe, repeatable automated attack capabilities.
  • Validate remediation and collaborate with research, product, and engineering teams.

Horizon3 is a fast-growing remote cybersecurity company that helps organizations proactively find, fix, and verify exploitable attack vectors. Its NodeZero platform delivers autonomous pentests, and the team is a collaborative culture committed to respect, ownership, and results.