What are the responsibilities and job description for the Penetration Tester (100% Remote) position at Shtudy?
Break it to protect it.
A forward-thinking U.S.-based company is actively hiring Penetration Testers (Ethical Hackers) to uncover vulnerabilities, simulate cyberattacks, and help organizations build stronger digital defenses. In this role, you'll test the limits of real-world systems to identify weak points before attackers do — and you’ll get paid well to do it
This is a rare opportunity to combine your curiosity, creativity, and technical skills in a fast-growing industry with meaningful, high-paying work.
NOTE: You must be physically located and eligible to work in the USA to qualify for this role.
Requirements
Key Responsibilities
A forward-thinking U.S.-based company is actively hiring Penetration Testers (Ethical Hackers) to uncover vulnerabilities, simulate cyberattacks, and help organizations build stronger digital defenses. In this role, you'll test the limits of real-world systems to identify weak points before attackers do — and you’ll get paid well to do it
This is a rare opportunity to combine your curiosity, creativity, and technical skills in a fast-growing industry with meaningful, high-paying work.
NOTE: You must be physically located and eligible to work in the USA to qualify for this role.
Requirements
Key Responsibilities
- Perform penetration tests on web applications, APIs, networks, cloud infrastructure, and mobile apps.
- Conduct reconnaissance, vulnerability scanning, exploitation, and post-exploitation analysis.
- Simulate real-world threat scenarios to test organizational security posture.
- Prepare detailed reports outlining risks, proof of concept (PoC) exploits, and remediation steps.
- Work with engineering teams to help patch and mitigate discovered vulnerabilities.
- Stay current on zero-day vulnerabilities, threat actor tactics, and new hacking tools.
- Contribute to Red Team/Blue Team exercises as needed.
- 2 years of experience with penetration testing tools such as Burp Suite, Metasploit, Nmap, Wireshark, Kali Linux, etc.
- Knowledge of OWASP Top 10, CVEs, and secure coding practices.
- Understanding of network protocols, web technologies, and operating systems (Windows, Linux, macOS).
- Ability to write or modify scripts in Python, Bash, or PowerShell.
- Strong attention to detail, ethical mindset, and analytical problem-solving ability.
- OSCP, CEH, GPEN, or other ethical hacking certifications.
- Bug bounty experience or contributions to open-source security projects.
- Knowledge of cloud security (AWS, Azure, GCP).
