Source Job

US

  • Support authorized red team and penetration testing engagements across FSA systems, networks, and cloud environments.
  • Conduct vulnerability validation, exploitation, and documentation of attack paths under established rules of engagement.
  • Apply the MITRE ATT&CK framework to categorize adversary techniques and retest vulnerabilities after remediation.

Penetration Testing Network Security Web Application Security MITRE ATT&CK Vulnerability Assessment

20 jobs similar to Red Team Tester

Jobs ranked by similarity.

$104,000–$166,000/yr
US

  • Lead and execute comprehensive penetration testing and red team exercises across networks, applications, APIs, and AWS cloud environments.
  • Apply NIST SP 800-115, MITRE ATT&CK, and DHS RVA standards to deliver high-quality, risk-based security assessments.
  • Mentor junior penetration testers and collaborate with security and infrastructure teams to remediate vulnerabilities and strengthen security posture.

Peraton is a next-generation national security company that delivers trusted mission-critical solutions to protect the nation and allies. The company supports essential government agencies and every branch of the U.S. armed forces, with employees solving the most daunting challenges facing customers.

$130,000–$142,000/yr
US

  • Plan and execute authorized red team assessments against government systems, applications, networks, APIs, and cloud environments.
  • Develop realistic attack scenarios aligned with MITRE ATT&CK and identify exploitable attack paths beyond automated scanning.
  • Document findings, provide remediation recommendations, and guide less-experienced testers through technical mentoring.

Valiant Solutions provides cybersecurity and IT services to federal civilian, defense, and national security customers nationwide. The firm is a multi-year Washington Business Journal Best Places to Work winner with a distributed, employee-centric culture.

$120,000–$150,000/yr
US

  • Lead advanced security assessments across web applications, APIs, cloud platforms, and enterprise networks.
  • Conduct red team activities, vulnerability research, and custom tool development to simulate real-world attacks.
  • Collaborate with cross-functional teams to assess risks, support remediation, and mentor colleagues.

Hitachi Vantara provides data infrastructure for global innovators across industries. As a diverse, global team, they foster an inclusive culture focused on making a real-world impact with data.

$200,000–$270,000/yr
US

  • Plan, scope, execute, and report on penetration tests across cloud, endpoint, web, and API environments.
  • Partner with development teams to embed security testing into their release cycles and mature SDLC practices.
  • Lead quarterly red and purple team operations simulating real-world adversaries to test detection and response.

Group 1001 is a consumer-centric, technology-driven family of insurance companies that delivers value by combining financial strength with deep insurance expertise. The culture emphasizes collaboration, communication, risk management, and striving for outcomes, fostering a supportive work environment.

US

  • Execute internal network and cloud-based SaaS penetration testing engagements.
  • Identify, validate, and manually exploit vulnerabilities using public or custom-developed exploits.
  • Deliver clear, client-ready reports with actionable remediation guidance to client stakeholders.

Pathfynder by A-LIGN is a technology-enabled cybersecurity company providing offensive and defensive cybersecurity services under A-LIGN, a security and compliance partner trusted by more than 2,400 global organisations. The company works with organisations ranging from small businesses to global enterprises in a fast-paced, collaborative, and remote-first environment.

US

  • Support the Red Cell Team by performing and leading penetration tests to assess the security of customer systems.
  • Identify vulnerabilities and develop recommended remediations to satisfy mandated NIST 800-53 security controls.
  • Report and demonstrate findings to system owners and engineers.

SkyePoint Decisions is a cybersecurity architecture and engineering, critical infrastructure and operations, and applications development and maintenance IT service provider headquartered in Dulles, Virginia with operations across the U.S. They are an ISO 9001:2015 and ISO/IEC 27001:2013 certified small business with a CMMI Level 3 for Services and Development, fostering a collaborative team culture built upon individual performance and accountability.

$112,500–$187,500/yr
US Unlimited PTO

  • Conduct comprehensive threat emulation exercises including red team, purple team, and penetration tests.
  • Collaborate with cross-functional teams to assess and improve security posture through adversary simulation.
  • Develop custom tools and document findings, risks, and recommendations for technical and business audiences.

TransUnion is a global information and insights company that helps consumers and businesses transact with confidence. With over 12,000 associates in more than 30 countries, it prioritizes work/life flexibility and a culture of innovation.

US

  • Implement security strategies tailored to cloud environments like AWS, GCP, and Azure.
  • Conduct cloud security assessments to identify vulnerabilities and risks in cloud infrastructure.
  • Prepare security compliance reports and execute Security Controls Test plans for ATO requests.

SkyePoint Decisions is a cybersecurity architecture and engineering, IT services provider supporting federal government clients. It is an ISO-certified small business with a collaborative culture that values flexibility and professional development.

US

  • Scope, plan, and execute penetration tests across web applications, APIs, networks, wireless, and physical environments.
  • Lead covert physical entry and social engineering operations against client facilities, including data centers.
  • Document findings for reproducibility, write actionable reports, and mentor junior testers.

Alpha Origin is a profitable, bootstrapped operational engineering firm that helps operators find where their systems are vulnerable to compromise or failure, then engineer and test fixes. The company is small and high-trust, with direct access to senior leaders and clients, a culture of ownership, and fast scope growth.

  • Lead and execute comprehensive penetration testing and Red Team operations across federal systems and networks.
  • Manage offensive security tools, infrastructure, and testing environments to ensure optimal performance.
  • Provide mentorship and quality assurance for junior penetration testers while collaborating with security teams to validate findings.

True Zero Technologies is a veteran-owned small business that focuses on enabling people and technology to deliver top-tier cybersecurity services. With accolades such as being named a Best Places to Work in 2023 and 2025, and recognition on the Inc. 5000 list, the company fosters a community of driven individuals committed to excellence.

$115,000–$125,000/yr
US

  • Perform and lead penetration tests of customer systems to identify exploitable vulnerabilities.
  • Apply assessment methodologies including NIST SP 800-115, PTES, and OWASP WSTG.
  • Report and demonstrate findings directly to system owners and engineers.

Valiant Solutions delivers cybersecurity and IT services to federal civilian, defense, and national security customers nationwide. The company is a multi-year Washington Business Journal Best Places to Work winner with an employee-centric culture and a distributed workforce.

Global

  • Conduct application security or network penetration testing using advanced tools and manual techniques.
  • Produce professional security assessment reports with vulnerability details and remediation recommendations.
  • Lead client-facing calls throughout engagements and perform proactive research on new threats.

Sophos is a cybersecurity company that delivers threat intelligence and security solutions to organizations worldwide. The company fosters a remote-first culture and values diverse perspectives, encouraging collaboration across locations.

US

  • Execute external network, web application, and API penetration testing engagements.
  • Identify, validate, and manually exploit vulnerabilities while assessing business and technical risk.
  • Deliver client-ready reports and communicate remediation guidance to stakeholders.

Pathfynder by A-LIGN is a technology-enabled cybersecurity company providing offensive and defensive services. It is trusted by more than 2,400 global organizations and offers a fast-paced, collaborative remote culture.

$96,021–$138,500/yr
US

  • Develop and execute test plans, test cases, procedures, and scripts for complex digital engineering solutions.
  • Validate cloud platforms, Infrastructure as Code, cybersecurity controls, and end-to-end engineering workflows across Azure and cloud-agnostic environments.
  • Collaborate with cross-functional teams to ensure capabilities meet requirements and are ready for iterative reviews, demos, and formal acceptance.

Aether Aerospace is a defense technology platform formed by JHNA, CTSi, and EXPANSIA, focused on delivering high-impact technologies, technology-enabled services, and advanced manufacturing solutions to the U.S. Department of Defense. The multi-entity enterprise operates as a scalable aerospace and defense technology business backed by Falfurrias Management Partners, emphasizing operational excellence and long-term value creation.

  • Coordinate test readiness activities, including client communication, scheduling, and troubleshooting to ensure engagements start on time.
  • Conduct advanced manual penetration testing on web applications, APIs, or network environments using tools like Burp Suite and Metasploit.
  • Produce professional security assessment reports detailing vulnerabilities, exploitation steps, and remediation recommendations for clients.

Sophos is a cybersecurity company that provides AI-driven threat prevention and managed detection and response services to 600,000 organizations globally. The company has a global team and promotes a remote-first culture with employee-led diversity initiatives and wellness programs.

US Unlimited PTO 12w maternity 12w paternity

  • Lead the process to build security into the Dscout SaaS environment throughout the software development lifecycle.
  • Collaborate with Engineering to plan and implement cybersecurity controls, including securing AWS resources and improving monitoring with SIEM and logging.
  • Assess evolving threats, respond to incidents, and provide recommendations to mitigate risk and improve security policies.

Dscout builds a flexible and powerful UX research platform trusted by top brands to understand the humans behind their products. The company is a remote-first team of passionate, empathetic, and curious professionals recognized as a leader in experience research technology.

UK Unlimited PTO

  • Support application security programs including threat modeling and security reviews for web and AI/LLM systems.
  • Triage SCA/SAST/DAST/CSPM findings and coordinate remediation with engineering teams.
  • Develop automation scripts and tools to integrate security solutions and streamline vulnerability management.

G-P is a leading SaaS-based Global Employment Platform that enables companies to expand into over 180 countries without establishing local entities. With a diverse, remote-first culture, G-P empowers its Dream Team with flexibility and resources to foster innovation and growth.

UK

  • Provide senior-level response to security alerts and own escalations.
  • Conduct threat hunting, vulnerability scanning, and penetration testing.
  • Create security alerts, dashboards, and response mechanisms while mentoring junior staff.

KnowBe4 empowers the modern workforce to make smarter security decisions every day, providing security awareness training and attack simulation. Trusted by more than 70,000 organizations worldwide, the company fosters a modern, high-tech, and fun work environment.

$155,000–$200,000/yr
Unlimited PTO

  • Demonstrate products to technical and non-technical audiences, including value propositions at an executive level.
  • Execute on sales opportunities from discovery to deal closure with support from an account executive.
  • Coordinate product trials, from installation to helping customers interpret data in their environment.

SpecterOps is a cybersecurity company that develops BloodHound Enterprise, an innovative solution for identity security. They are a mid-sized firm with a culture emphasizing passionate curiosity, consistent improvement, empathy, sustainability, humility, and empowerment through transparency.

$93,600–$157,560/yr
US 2w PTO

  • Design, operate, and continuously improve application security testing capabilities and pipelines.
  • Assess application risks, perform security reviews across multiple languages, and assist with penetration testing.
  • Provide application security guidance and mentorship to development teams as needed.

Esri is a global leader in geographic information system (GIS) technology, helping organizations create positive global change. With a diverse workforce unified under this mission, Esri fosters an inclusive culture that values continuous learning and growth.