34 penetration jobs at 18 companies in Colorado

1mo
Save
Mark Applied
Hide
Lead Penetration Tester
Fort Collins or Kansas City or Washington
$130k-$150k/yr FieldFull Time
Revolutional
Revolutional: Delivers advanced technology and mission support to federal agencies.
5+ YOEBachelor's or equivalent,5+ years penetration testing with federal experience,CISA AES required or in process,active Secret clearance,FedRAMP pen testing experience,ability to travel to agency sites.
OWASP, NIST SP 800, DISA STIG, FedRAMP, AWS, Azure, GCP, GovCloud
1mo
Save
Mark Applied
Hide
Security Assurance Penetration Tester
Pennsylvania or Connecticut or Virginia or Massachusetts or Pittsburgh or Delaware or Michigan or New Jersey or Philadelphia or Colorado or New York
$72k-$119k/yr RemoteFull Time
Elsevier
ElsevierLondon Stock Exchange: REL: Provides scientific, technical, and medical research information and analytics.
Hands-on penetration testing experience, familiarity with web/cloud/OS security, scripting, and offensive security tooling; security certification preferred.
Burp Suite, Nmap, Metasploit, Nuclei, OWASP Top 10, CVSS, Python, Bash, PowerShell, AWS, Azure, GCP, SAST, DAST
1mo
Save
Mark Applied
Hide
Security Assurance Penetration Tester
Pittsburgh or Philadelphia or Pennsylvania or Connecticut or Virginia or Massachusetts or Delaware or Michigan or New Jersey or Colorado or New York
$72k-$119k/yr RemoteFull Time
RELX
RELXLondon Stock Exchange: REL: Provides information-based analytics and decision tools for professional customers.
Experience in information security/penetration testing, familiarity with web/cloud/app vulnerabilities, scripting (Python/Bash/PowerShell), security tools and relevant certifications preferred.
Burp Suite, Nmap, Metasploit, Nuclei, Python, Bash, PowerShell, OWASP Top 10, CVSS, SAST, DAST, AWS, Azure, GCP
1w
Save
Mark Applied
Hide
Lead Penetration Test Engineer
Princeton or Boston or Chicago or Dallas or Houston or Englewood or Raleigh or New York or Southfield or Washington or Toronto or Calgary
$135k-$200k/yr HybridFull Time
S&P Global
S&P GlobalNYSE: SPGI: Provides independent credit ratings, market benchmarks, and financial analytics.
8+ YOE8+ years in information security focused on penetration testing, vulnerability management and application/cloud security; offensive security certification required; strong scripting skills and ability to communicate findings.
Burp Suite, Nessus, Metasploit, Nmap, MITRE ATT&CK, Bash, Python, Go, PowerShell, JavaScript, DAST, SAST, SCA, AWS, Azure, GCP
1w
Save
Mark Applied
Hide
Senior IT Penetration Tester
United States or Oak Brook or Los Angeles or Washington or Troy or New York City or Houston or Chicago or Grand Rapids or Owings Mills or Columbia or Richmond or Memphis or Raleigh or Boston or San Jose or San Francisco or Austin or Kalamazoo or Spokane or Denver or Fort Worth or Atlanta or Orlando or Dallas or Wilmington or Phoenix or San Antonio or Milwaukee or Madison or McLean or Melville or Woodbridge or Stamford or Philadelphia or Charlotte or Greenville or West Palm Beach or Costa Mesa or St. Louis or Fort Lauderdale or Seattle or Pittsburgh or Tulsa or Cincinnati or Cleveland or Columbus or Akron or Cherry Hill or Tampa or Minneapolis or Anchorage or Salt Lake City or Norfolk or Jacksonville or Boulder or Nashville or Las Vegas or Indianapolis or San Diego or Potomac or Baton Rouge or Omaha
$120k-$160k/yr OnsiteFull Time
BDO USA
BDO USA: Provides accounting, tax, and business advisory services to organizations.
4+ YOEFour or more years of hands-on penetration testing experience, strong Windows, Linux, networking, Active Directory, scripting, reporting, client communication, and offensive security tooling skills; high school diploma required.
Kali Linux, Nessus, Tenable, Nmap, Burp Suite, Metasploit, BloodHound, Microsoft 365, OWASP Top 10 for LLM Applications, Python, PowerShell, Bash, Git, GitHub Actions, Azure DevOps, Docker, GitHub, Microsoft Word, Microsoft Excel, Microsoft PowerPoint, Splunk, Microsoft Sentinel, GitHub Copilot, Claude Code, Microsoft Azure, AWS, SAML, OAuth 2.0, OpenID Connect, Kerberos, NTLM, TCP/IP, DNS, Windows, Linux
1w
Save
Mark Applied
Hide
Lead Penetration Test Engineer
Princeton or Calgary or Toronto or Englewood or Chicago or Raleigh or New York or Dallas or Houston
$135k-$200k/yr HybridFull Time
S&P Global
S&P GlobalNYSE: SPGI: Provides financial data, analytics, and credit ratings worldwide.
8+ YOE8+ years information security experience focused on penetration testing, application/cloud security, vulnerability management; offensive security certification required; scripting (Bash, Python, Go, PowerShell, JavaScript); experience with DAST/SAST/SCA and CI/CD integration; bachelor's degree or equivalent.
Burp Suite, Nessus, Metasploit, Nmap, OWASP Top 10, MITRE ATT&CK, DAST, SAST, SCA, Bash, Python, Go, PowerShell, JavaScript, AWS, Azure, GCP
1mo
Save
Mark Applied
Hide
Manual Ethical Hacker
Denver or Washington or Seattle or Charlotte or Jacksonville or Jersey City or Chicago
$117k-$148k/yr OnsiteFull Time
Bank of America
Bank of AmericaNYSE: BAC: Provides banking, investment, and financial risk management services.
4+ YOE4+ years pentesting/application security experience; ability to perform manual web and code reviews, develop PoCs, use penetration tools, and communicate technical findings.
IBM AppScan, Burp, SQL Map, Frida, UNIX, LINUX, TCP/IP, Static Application Security Testing (SAST)
3d
Save
Mark Applied
Hide
Expansion Account Executive, Accountant Channel (West Coast)
San Francisco or Washington or Montana or Oregon or California or Nevada or Idaho or Wyoming or Colorado or New Mexico or Utah or Alaska
$150k-$160k/yr HybridFull Time
Rippling
Rippling: Unified platform managing workforce HR, IT, and finance operations
1+ YOECurrent Rippling CAE with over 12 months' tenure, proven partner-base penetration and quota achievement, consultative selling skills, $20K+ deal experience, and cross-functional collaboration.
MEDDPICC, CRM, Slack, Microsoft 365
4d
Save
Mark Applied
Hide
Red Team Operator
Chicago or Massachusetts or Maryland or Wisconsin or Washington or White Plains or Reston or Texas or Georgia or South Carolina or Florida or North Carolina or Delaware or Connecticut or Crum Lynne or Colorado or California or Missouri or Boca Raton
$113k-$188k/yr RemoteFull Time
TransUnion
TransUnionNYSE: TRU: Provides global credit reporting and risk management information solutions.
5+ YOERequires 5+ years conducting penetration tests and red team operations, expertise in privilege escalation, lateral movement, phishing, social engineering, reporting, and Python, Bash, or Git development.
Python, Bash, Git, OSCP, OSCE, GPEN, GWAPT, CISSP, HSA, FSA, 401(k), Employee Stock Purchase Plan (ESPP)
1mo
Save
Mark Applied
Hide
Cyber Researcher, Attack Emulation (Senior / Principal)
Burlington or Golden or Israel
$180k-$220k/yr RemoteFull Time
Pentera
Pentera: Automated security validation and penetration testing platform
5+ YOE5+ years security research/penetration testing, 3+ years Python, strong Windows/Linux internals, reverse engineering, cloud (AWS/Azure), and proficiency with security tools (Metasploit, Nmap, Burp).
Python, Metasploit, Impacket, Nmap, Burp, IDA, Ghidra, WinDBG, Radare2, Windows, Linux, AWS, Azure
4w
Save
Mark Applied
Hide
Senior Account Executive, New Logo
Denver or Phoenix or Las Vegas
$300k-$350k/yr FieldFull Time
Temporal
Temporal: Platform for building and running reliable distributed applications.
7+ YOE7+ years enterprise software sales experience selling to technical buyers (engineers, architects), proven new-logo acquisition, quota attainment, strategic account penetration, strong communication and negotiation skills.
1mo
Save
Mark Applied
Hide
Senior Product Security Engineer II
United States or California or New York or Connecticut or New Jersey or Washington or Oregon or Delaware or Maine or Massachusetts or Maryland or New Hampshire or Rhode Island or Vermont or District of Columbia or Pennsylvania or Virginia or Colorado or Texas or Illinois or Hawaii or Canada
$192k-$243k/yr RemoteFull Time
Instacart
InstacartNasdaq: CART: Provides grocery delivery and retail technology solutions.
37+ YOEExperienced security engineer/penetration tester able to design and run offensive security engagements, conduct threat modeling and assessments, prioritize security initiatives, and create technical documentation for cross-functional teams.
3w
Save
Mark Applied
Hide
Solutions Architect
Littleton, Colorado, United States
$127k-$182k/yr OnsiteFull Time
EchoStar
EchoStarNasdaq: SATS: Global provider of satellite solutions and wireless communications services.
Expertise in enterprise IAM, Zero Trust, CTI, vulnerability assessment and penetration testing; bachelor\u0002s degree or equivalent experience; strong AI-driven security operations and cross-functional leadership skills.
Identity and Access Management (IAM) frameworks, Zero Trust Architecture, Cyber Threat Intelligence (CTI) frameworks, vulnerability assessment and penetration testing tools, AI-driven threat detection tools
1mo
Save
Mark Applied
Hide
Digital Network Exploitation Analyst 3
Annapolis Junction or Maryland or Virginia or Colorado or Texas or Utah or Alaska or Hawaii
$59-$92/hr OnsiteFull Time
Wyetech
Wyetech: Provides professional engineering services for government and commercial sectors.
4+ YOERequires US citizenship and active TS/SCI with agency poly; 4+ years (doctorate) to 10+ years (associate) of relevant computer/IS experience; background in vulnerability analysis, penetration testing, forensics, systems engineering.
1w
Save
Mark Applied
Hide
Cybersecurity Analyst III
Colorado Springs, Colorado, United States
$120-$140k/yr OnsiteFull Time
ARES Corporation
ARES Corporation: Provides engineering and technology solutions for space and defense.
Bachelor's in CS/IS or related, active DoD clearance, senior cybersecurity cert (CASP+, CCNP Security, CISA, CISSP, GCED, or GCIH) preferred, experience with RMF, vulnerability assessments, control development, and penetration testing.
Nessus, Burp Suite, Nmap, ACAS, Risk Management Framework (RMF)
2w
Save
Mark Applied
Hide
Inspector II
Boulder, Colorado, United States
$48k-$76k/yr OnsiteFull Time
BAE Systems
BAE SystemsLondon Stock Exchange: BA: Provides advanced defense, aerospace, and security technology solutions.
1+ YOEPerform non-destructive testing (NDT) including radiography and liquid penetrant; maintain certifications; high school diploma plus 1+ year related experience; ability to interpret engineering drawings and accept/reject criteria.
3d
Save
Mark Applied
Hide
Cybersecurity Application Security Engineer
Centennial or Lincoln or Madison or Sidney
$90k-$125k/yr HybridFull Time
Nelnet
NelnetNYSE: NNI: Provides student loan servicing and educational payment processing solutions.
2+ YOERequires 2–4 years of application security experience, secure code review, threat modeling, SAST/SCA/DAST, penetration testing, CI/CD integration, scripting, AI/LLM security, and strong communication skills.
Java, JavaScript, TypeScript, C#, PHP, STRIDE, Python, Bash, Node, SAST, SCA, DAST, CI/CD, OWASP Top 10, RAG
1mo
Save
Mark Applied
Hide
Staff Product Security Engineer
Atlanta or New York or California or Washington or Colorado
$165k-$200k/yr HybridFull Time
Greenlight
Greenlight: Financial platform and debit card for kids and families.
10+ YOE10+ years product security experience across application, cloud, and SDLC; expert threat modeling; hands-on penetration testing; PSIRT operations; AI security and secure AI guardrails; programming and CI/CD knowledge; experience with cloud and modern frameworks.
STRIDE, PASTA, attack tree, Burp Suite, Metasploit, Kali Linux, Postman, Claude, Cursor, CVE, CVSS, FIRST PSIRT, OWASP Top 10, MITRE, SAST, DAST, SCA, Node.js, Java, Kotlin, React, Redux, Swift, SwiftUI, AWS, GCP, Kubernetes, Ambassador, Helm, MySQL, DynamoDB, Redis, CI/CD
2mo
Save
Mark Applied
Hide
Cybersecurity Engineer III
Colorado Springs, Colorado, United States
$160k-$180k/yr OnsiteFull Time
The Bison Group
The Bison Group: Provides intelligence and technology services for national security missions.
6+ YOEBachelor's (or +4 yrs experience) and 6+ years relevant experience; DoD 8570 IAT II or IAM II; active TS/SCI with ability to obtain CI poly; experience with SIEM, Splunk, Tenable Nessus, Zeek, ELSA, penetration testing and forensic analysis.
SIEM, Splunk, Tenable Nessus, Zeek, ELSA