Penetration Tester (1099 Independent Contractor, U.S.-Based)
Remote · United States
Source: Himalayas. This job was published on Himalayas; you apply there.
Listed on Himalayas. You apply through their page. We never charge applicants.
Estimated pay
Estimate$105K–$162K/yr
Estimate — the employer hasn't published pay.
Based on 662 similar mid-level Security jobs in United States that show pay. The range is the middle half of their posted pay (25th to 75th percentile), not an offer — ask the employer for the real range.
Security salaries →Prepare for this job
Free on every jobLikely interview questions
Prepare for this interviewAt a glance
- Experience asked
- 5+ years
- Education
- Master's
Skills mentioned
About the role
About Socium Security
Socium Security is a modern cybersecurity partner built for organizations that need clarity, speed, and measurable impact. We help leadership teams safeguard what matters most—protecting value, reducing operational risk, and strengthening resilience across every stage of organizational growth.
Grounded in curiosity, authenticity, adaptability, and practical execution, we challenge assumptions and deliver clear, actionable intelligence - not theoretical checklists. Our approach blends strategic advisory with hands-on technical expertise, ensuring decisions are informed, investments are prioritized, and security programs mature with purpose.
With decades of experience supporting Fortune 500 enterprises, global brands, and high-growth companies, our leadership brings deep, real-world insight into complex environments, operational maturity models, and the risk factors that directly influence organizational performance.
Penetration Tester (1099 Independent Contractor, U.S.-Based)
Socium is seeking a U.S.-based independent penetration testing consultant to support client engagements on a project basis. This role is best suited for a mid-to-senior tester who can independently execute scoped assessments, validate real-world exploitability through manual testing, and deliver polished client-ready reports and debriefs.
Primary responsibilities
- Conduct web application, API, external/internal network, and selected cloud penetration tests within agreed rules of engagement
- Manually validate findings, distinguish exploitable risk from noise, and chain issues where appropriate
- Produce deliverable reports with executive summary, technical details, evidence, reproduction steps, and prioritized remediation guidance
- Present results to technical and non-technical stakeholders and support limited retesting tied to the engagement scope
Required experience
- 5+ years of professional penetration testing experience
- 3+ years leading client-facing consulting engagements or equivalent
- Strong hands-on depth in at least two of the following: web applications/APIs, external/internal network testing, Active Directory, AWS/Azure/GCP testing
- Strong written communication and report-writing skills
- Experience with Burp Suite Pro, Nmap, Metasploit, and scripting in Python, Bash, or PowerShell
Preferred
- Mobile testing, social engineering, or adversary simulation experience
- Relevant certifications such as OSCP, OSEP, OSWE, GWAPT, GPEN, GXPN, PNPT, or CPTS
- Experience presenting findings to clients or executives
Contract terms
- 1099 independent contractor engagement
- Must reside and perform services within the United States
- Must be able to provide a W-9 and invoice as a U.S.-based individual or business
- No third-party agencies, staffing firms, or offshore subcontracting
- Contractor is responsible for standard tooling and methods used to meet agreed deliverables, subject to client testing windows and rules of engagement
Originally posted on Himalayas