Employment and location
This is full-time W-2 employment and is fully remote from an eligible location in the United States. Regular overlap with core US business hours is required. No routine travel is expected.
Open position
Principal Penetration Tester
Set the technical standard for authorized assessments, lead difficult decisions, and make sure every reported finding is accurate, useful, and defensible.
US remoteFull-time W-2Technical leadershipOpen until filled
The role
Own technical quality across the testing practice.
You will lead complex web application, API, network, and cloud penetration tests while establishing consistent methods for planning, evidence, validation, reporting, and technical review.
You will remain hands-on. You will also review difficult findings, help resolve scope and safety questions, coach other practitioners, and improve how Trespass turns authorized testing into clear customer decisions.
What you will do
Combine deep testing with technical leadership.
- Lead difficult assessments
Plan and execute technically complex work within written authorization, Rules of Engagement, restrictions, and stop conditions.
- Set the quality bar
Define practical testing and evidence standards, review findings, challenge unsupported conclusions, and ensure reports state impact and limitations accurately.
- Guide scope and safety
Provide senior technical input when targets, attack paths, provider policies, data handling, or operational risk require careful decisions.
- Develop the practice
Coach practitioners, improve repeatable methods, evaluate tools without becoming tool-dependent, and strengthen report and retest consistency.
What we are looking for
Judgment, depth, and a record of technical ownership.
- Principal or lead-level experience owning penetration tests and reviewing the work of other experienced practitioners.
- Deep capability in web application and API testing, with practical experience across network and cloud attack surfaces.
- Ability to validate complex findings, reason about attack paths, and distinguish demonstrated impact from speculation.
- Experience making final technical-review decisions, resolving disputed findings, and approving documented methodology exceptions.
- Strong customer communication and technical decision-making under scope and safety constraints.
- Experience improving assessment methodology, evidence quality, peer review, or practitioner development.
- Relevant degrees and security certifications are welcome but are not required.
What success looks like
The technical standard is clear and consistently applied.
- Practitioners know what evidence is required and when a finding is ready for reporting.
- Complex scope, safety, and technical-review questions reach clear, documented decisions.
- Reports distinguish demonstrated impact, limitations, and remediation direction without exaggeration.
- Testing methods improve as engagements reveal recurring gaps or better approaches.
Position details
Employment, location, and authorization.
Work authorization
Applicants must be currently authorized to work in the United States. Trespass Security is not able to provide employment-based immigration sponsorship for this role.
How to apply
Start with a resume and a brief note.
Email your resume and a brief note describing your experience leading penetration tests, reviewing findings, and improving technical quality.
Apply for this roleWe use application materials to evaluate your candidacy and may retain them for future roles for up to 12 months. You may opt out or request deletion through our Privacy Policy. Do not send customer data, credentials, exploit code, vulnerability evidence, or other confidential materials.
Hiring process
We focus on technical judgment and quality leadership.
The process has two conversations and no unpaid take-home project.
- An introductory conversation about the role, your leadership experience, and the way Trespass works.
- A technical and final conversation using past assessment decisions to discuss evidence quality, review judgment, escalation, and customer communication.
Employment is contingent on completion of a job-related background check conducted in accordance with applicable law. Applicants who need a reasonable accommodation may email careers@trespasssec.com.
Equal opportunity
Trespass Security is an equal opportunity employer.
Trespass Security provides equal employment opportunities without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, disability, genetic information, veteran status, or any other status protected by applicable law.