Ethical Hacker/IT-Security (m/w/d)

Cybersecurity Penetration Tester

Reports to: Cybersecurity Operations Manager
Status: Regular, Full-Time, Exempt
Location: Remote, USA
As Penetration Tester at FIT Cybersecurity, your responsibilities would include testing client’s internal and external networks, web applications, and APIs. As a consultant, youll solve challenging technical problems and build creative solutions. As a trusted advisor, youll provide your expert opinion to help our clients navigate difficult business decisions. And as a security associate, youll lead teams on one-of-a-kind engagements, mentor co-workers, and contribute significantly to the advancement of our assessment and penetration testing practice.
FIT Solutions is an innovative national IT and Cybersecurity Services firm, and we are growing every day. We teach and promote individuals to set and achieve their personal, professional, and financial goals through the work we do together. Execute webapp and network pen tests independently, providing clients the remediation guidance for all significant identified vulnerabilities.
Contribute to Assessment Research and Development initiatives (identifying new 0-day vulnerabilities, improving attack methodologies, improving penetration test tolling, etc.).
Develop and adhere to process documentation in support of cyber penetration testing execution.
Identify emerging security risks and collaborate with internal service teams and clients to develop appropriate mitigation strategies.
Configure and support various operating systems (Windows, Linux, UNIX, macOS), virtualization platforms (VMware, Xen, Hyper-V), and cloud environments (AWS, Azure) used in penetration testing.
Effectively assess and communicate security risks, business impact, and appropriate levels of urgency to stakeholders.
Share knowledge, provide technical guidance, and train team members on penetration testing methodologies, tools, and best practices.
Support continuous improvement initiatives to enhance the effectiveness and efficiency of penetration testing services.
Strong understanding of cybersecurity fundamentals, common vulnerabilities, attack methodologies, and remediation strategies.
Demonstrated experience in vulnerability discovery, security engineering, application security, and penetration testing.
Ability to independently manage multiple client engagements, prioritize competing deadlines, and deliver high-quality results.
Strong attention to detail, particularly in documenting vulnerabilities, supporting evidence, and remediation recommendations.
Ability to work collaboratively in a remote, client-focused consulting environment.
Additional advanced cybersecurity certifications, including OSCE, GWAPT, GXPN, or CISSP, are a plus.
Candidates must be able to provide a sanitized sample penetration testing report demonstrating their ability to document vulnerabilities, assess risk, present technical findings, and communicate actionable remediation recommendations. All samples must exclude confidential client information.
Strong foundational knowledge and hands-on experience in web application and network penetration testing. Experience with mobile applications, APIs, and cloud environments is a plus.
Previous experience in cybersecurity consulting, penetration testing, or offensive security assessments.
Solid understanding of common web application vulnerabilities, exploitation techniques, and remediation options.
Knowledge of IT infrastructure, security engineering, system and network security, authentication protocols, and applied cryptography.
Experience with configuration management, system maintenance, integration testing, penetration testing, and vulnerability analysis.
Knowledge of system architectures and networking technologies, including client/server environments, web hosting, directory services, firewalls, WAN, MAN, LAN, switches, and routers.
Proficiency with macOS, Linux, and Windows operating systems.
Experience preparing professional penetration testing reports and presenting assessment results to clients.
Familiarity with industry-standard penetration testing methodologies, frameworks, and tools.
WORK ENVIRONMENT AND TRAVEL

Remote position with occasional travel required for client engagements, meetings, or other business needs.
Occasional testing outside of regular business hours, including evenings and weekends, may be required based on client needs and engagement requirements.
Health, Dental & Vision Insurance (premiums paid up to 99% for employee coverage)
FSA (dependent and medical), HSA options (for qualified plans) and supplemental insurance options
~$10,000 employer-paid Life Insurance & AD&D (employees have the option to buy up)
~ Paid holidays
~ Flexible “hybrid” work environment
~ Retirement plan (401K)
~ Professional training & development opportunities

Position may require travel: Reasonable accommodation may be made to enable individuals with disabilities to perform the essential requirements.
All employment decisions are based on business needs, job requirements and individual qualifications, without regard to race, color, religion or belief, national, social or ethnic origin, sex (including pregnancy), age, physical, mental or sensory disability, HIV status, sexual orientation, gender identity and/or expression, marital, civil union or domestic partnership status, past or present military service, family medical history or genetic information, family or parental status, or any other status protected by the laws or regulations in the locations where we operate.