New

Continuous security programs for teams that ship every week.Continuous security is here. See how it worksLearn more

Senior Penetration Tester

Offensive security · Remote · Full-time · Posted Oct 7, 2026

Lead web, API and cloud penetration tests from scoping to retest, and turn what you find into fixes clients actually ship.

The role

What you'll do

  • Run manual, adversarial tests against web applications, APIs and cloud environments
  • Chain weaknesses into real attack paths and explain their business impact
  • Write clear findings with reproduction steps and code-level fixes
  • Walk client engineers through issues and verify their fixes

What we look for

  • Several years of hands-on offensive security work
  • Strong understanding of web and API vulnerabilities beyond scanner output
  • Comfort reading code in at least one mainstream language
  • Clear writing, and patience explaining risk to non-specialists

How to apply

Prefer email? Send a link to your work and your CV to info@hexdrift.com. No cover letter needed. Every applicant hears back from a person.