Penetration Tester – Contract

Bishop Fox

Contract Penetration Tester specializing in web application security at Bishop Fox. Engaging in vulnerability assessments and providing remediation guidance for complex software and technologies.

Posted 5/7/2026contractRemote • 🇺🇸 United StatesMid-LevelSeniorWebsite

Tech Stack

Tools & technologies

Cloud

About the role

Key responsibilities & impact

Bishop Fox is looking for experienced contract penetration testers with a primary focus in web application security and strong secondary expertise in cloud, mobile, source code, network, or AI/LLM security.
You’ll work on a range of projects, from short-term assessments to longer-term program engagements with well-established clients.
In this role, you’ll identify vulnerabilities, validate risk, develop creative solutions, and clearly communicate findings and remediation guidance to both technical and executive stakeholders. As a trusted advisor, you’ll help clients understand risk and make informed security decisions.

Requirements

What you’ll need

5+ years of experience planning, conducting, and managing web application penetration tests
Deep understanding of application security fundamentals, OWASP Top 10, common vulnerabilities, and secure development best practices
Experience assessing vulnerabilities and developing exploits across diverse targets
Strong understanding of system and network security, authentication protocols, security protocols, and applied cryptography
Ability to communicate complex technical findings clearly and provide practical remediation guidance to technical and executive audiences

Benefits

Comp & perks

This engagement is for independent contractors (1099) and is not eligible for any form of employment sponsorship. All new hires must pass a background check as a condition of employment.

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

penetration testingweb application securitycloud securitymobile securitysource code securitynetwork securityAI securityvulnerability assessmentexploit developmentsecure development best practices

Soft Skills

communicationproblem-solvingadvisory skillsstakeholder engagementrisk assessment