---
title: 'Penetration Tester at A-LIGN External'
canonical: 'https://feeny.ai/job/penetration-tester-a-lign-external-united-states-eygvjx4t4neh'
type: 'job'
last_seen: '2026-10-19'
---

# Penetration Tester at A-LIGN External

- **Company:** A-LIGN External
- **Location:** United States
- **Work type:** remote
- **Posted:** 2026-10-13
- **Last confirmed live:** 2026-10-19
- **Apply:** https://job-boards.greenhouse.io/align/jobs/8883264002

## Job description

## About the Role

The Penetration Tester works to execute offensive security activities across external networks, web applications, and APIs. In this role, you will be responsible for the execution of penetration testing engagements, including identifying, validating, and manually exploiting vulnerabilities, evaluating potential attack paths, and documenting findings and remediation guidance. As the Penetration Tester, you will provide exceptional technical and creative strategies to support the continued growth of our fast-paced company. A-LIGN will depend on you as the Penetration Tester to support management, independently execute assigned projects, communicate technical findings to clients, and contribute to the continuous improvement of our offensive security tools, methodologies, and delivery processes.

Reports to

Director, Web Application & External Offensive Operations

Pay Classification

Full-Time, Exempt

## Responsibilities

- Execute external network, web application, and API penetration testing engagements in accordance with defined scopes, methodologies, and rules of engagement
- Identify, validate, and manually exploit vulnerabilities using public exploits, internally developed techniques, or a combination of approaches
- Evaluate attack paths and determine the potential business and technical impact of identified vulnerabilities
- Compile and write clear, accurate, and defensible client reports that explain findings, risk, evidence, and remediation guidance
- Communicate with clients throughout engagements, including technical discussions, findings walkthroughs, and responses to questions or challenges
- Execute assigned projects with minimal oversight while maintaining quality, professionalism, and attention to detail
- Collaborate with team members to evaluate offensive security tools and improve testing methodologies, delivery processes, and reporting standards
- Share technical knowledge and practical guidance with less-experienced team members and clients when appropriate
- Maintain current knowledge of emerging vulnerabilities, attack techniques, security research, and industry trends

## Minimum Qualifications

## EDUCATION

- Master’s or Bachelor’s degree in cybersecurity, management information systems, computer science, or relevant discipline

## EXPERIENCE

- 5-8 years of hands-on penetration testing experience in at least one of the following areas:
- External Penetration Tests
- Web Application Penetration Tests
- API Penetration Tests
- Mobile Application Penetration Tests
- Experience independently executing penetration testing engagements and producing high-quality client deliverables
- Knowledge of established penetration testing methodologies and disciplined evidence collection practices
- Experience identifying and manually validating exploitable vulnerabilities rather than relying solely on automated scanning
- Experience communicating technical findings, risk, and remediation guidance clearly to clients and internal stakeholders

## CERTIFICATIONS

- Preferred OSCP, eWPT, eWPTX, OSWA, or OSWE certification

## SKILLS

- Proficiency with commonly used offensive security tools such as Nmap, SQLmap, Burp Suite, Postman, Nuclei, Wireshark, Nessus, and Caido
- Proficiency with one or more scripting languages such as Python, Bash, JavaScript, PowerShell, or SQL
- Solid understanding of web technologies, networking concepts, authentication, access control, and common application security weaknesses
- Ability to work independently as well as collaboratively in a remote, fast-paced environment
- Excellent written and verbal communication skills, with the ability to explain technical issues to different audiences
- Ability to meet deadlines while maintaining a high degree of motivation, self-discipline, and quality

## Benefits

- Healthcare, Dental, and Vision Benefits
- Employer Paid Life Insurance and Disability Insurance
- EAP - Employee Assistance Program
- Pet Insurance
- 401(k) Plan with Employer Matching
- Competitive Bonus Structure
- Tech Allowance
- Certification Reimbursement
- Personalized Career Coaching
- Generous Paid Time Off
- Paid Office Closure December 25-January 1
- Vacation Bonus
- Summer Hours

## About Pathfynder by A-LIGN

Pathfynder by A-LIGN is a leading technology-enabled cybersecurity company providing premium offensive and defensive cybersecurity services operating under A-LIGN, a security and compliance partner trusted by more than 2,400 global organizations to confidently mitigate cybersecurity risks. We work with small businesses to global enterprises with services spanning across SOC, Penetration Testing, PCI DSS, HITRUST, ISO and privacy compliance. Our proprietary compliance management platform is transforming the compliance experience by enabling an anytime, anywhere approach to audits. For more information, visit [www.A-LIGN.com](https://www.a-lign.com/).

Come Work for A-LIGN!

Apply online today at A-LIGN.com and learn about life at A-LIGN by following us on [LinkedIn](https://www.linkedin.com/company/a-lign/posts/?feedView=all).

A-LIGN is an Equal Opportunity Employer. Minorities, women, disabled, and veterans encouraged to apply!

## About A-LIGN External

## Company Overview
- **One-liner**: A-LIGN is a technology-enabled security and compliance partner that helps organizations navigate cybersecurity risks through auditing, certification, and managed compliance services.
- **Entity Type**: Private (funding stage not disclosed)
- **Headquarters**: Tampa, Florida, United States (with additional offices in London, Galway, Panama City, Sofia, and Gurugram)
- **Founded**: 2009
- **Founders**: Not publicly available

## Core Business
- **Primary industry/industries**: Cybersecurity, Compliance, Audit, Risk Management
- **Target customers**: B2B – startups to global enterprises; heavily focused on regulated industries (tech, healthcare, government, finance)
- **Mission or purpose statement**: “Help companies like yours navigate the complexities of cybersecurity and compliance by offering customized solutions that align specifically with each organization's unique goals and objectives.” [a-lign.com](https://www.a-lign.com/about)

## Products & Services
- **SOC 1 and SOC 2 Audits**: Licensed auditor for System and Organization Controls reports.
- **ISO 27001 / 27701 / 22301 Certifications**: Accredited certification body for information security, privacy, and business continuity.
- **HITRUST CSF Assessment**: HITRUST CSF Assessor Firm.
- **FedRAMP**: Accredited 3PAO for cloud service provider authorizations.
- **CMMC (Cybersecurity Maturity Model Certification)**: C3PAO for defense supply chain compliance.
- **PCI DSS**: Qualified Security Assessor Company.
- **A-SCEND Platform**: Proprietary compliance management platform for evidence collection, audit tracking, and reporting.
- **Penetration Testing & Ransomware Preparedness**: Additional security testing services.

## Market Standing
- **Valuation/Market Cap**: Not disclosed
- **Key Metric**: Total funding not disclosed; key operational metrics include 6,400+ clients globally, 36,000+ audits completed, and 400+ auditors [a-lign.com](https://www.a-lign.com/).
- **Notable Investors/Partners**: Not publicly listed; partners with leading GRC automation tools (e.g., compliance automation providers) [a-lign.com](https://www.a-lign.com/).
- **Growth Signals**: Offices across 6 countries; recognized as #1 Top SOC 2 report issuer and Top 3 FedRAMP assessor; 96% customer satisfaction rating; expanded services to include CMMC and FedRAMP.

## Competitive Advantages
- **Single-provider model**: Offers the widest breadth of compliance frameworks (SOC, ISO, HITRUST, FedRAMP, PCI, CMMC) under one roof, reducing vendor fragmentation.
- **Proprietary technology**: A-SCEND platform streamlines audit evidence collection and communication.
- **Scale and reputation**: Largest issuer of SOC 2 and HITRUST reports; top FedRAMP assessor; trusted by thousands of organizations.
- **Quality focus**: 24-hour response time and high customer satisfaction (96%).

## Strategic Focus
- **Current priorities**: Continuing to expand global presence, deepening FedRAMP and CMMC capabilities, and enhancing the A-SCEND platform to further automate compliance workflows.
- **Direction for growth**: Pursuing new markets (government, healthcare, defense) and scaling the auditor workforce to meet demand.

## Why Work Here
- **Culture**: Emphasizes human connection, quality, integrity, and innovation. Core values: “Be all in”, “Commit to quality”, “Do the right thing”, “Innovate constantly”. Annual company event called CLIMB.
- **Workplace flexibility**: Multiple global locations; home office reimbursement suggests hybrid/remote options are available for some roles.
- **Benefits**: Healthcare/dental/vision, employer-paid life and disability insurance, 401(k) with match, generous PTO (including paid office closure Dec 25–Jan 1), summer hours, certification reimbursement, personalized career coaching, and access to A-LIGN University for continuous learning.
- **Diversity & Inclusion**: Prioritizes DEI; encourages individuals from all backgrounds to apply.
- **Career growth**: Opportunities to move between cybersecurity, audit, and operations tracks; sponsorship for certifications like CISA, CISSP, CEH.

## Sources
1. [a-lign.com/about](https://www.a-lign.com/about)
2. [a-lign.com/](https://www.a-lign.com/)
3. [a-lign.com/careers](https://www.a-lign.com/careers)
4. [linkedin.com/company/a-lign](https://www.linkedin.com/company/a-lign)
5. [boards.greenhouse.io/align](https://boards.greenhouse.io/align)

## Other roles at A-LIGN External

- [Senior Director, Corporate Marketing](https://feeny.ai/job/senior-director-corporate-marketing-a-lign-external-united-states-5sjg0mghtbhv) — United States
- [Business Development Representative](https://feeny.ai/job/business-development-representative-a-lign-external-tampa-g0c1mvjzcya2) — Tampa, United States
- [DevSecOps Engineer](https://feeny.ai/job/devsecops-engineer-a-lign-external-panama-k6jqx30tx67b) — Panama
- [Business Development Manager](https://feeny.ai/job/business-development-manager-a-lign-external-tampa-c5tkpyyp4ntk) — Tampa, United States
- [Business Development Manager](https://feeny.ai/job/business-development-manager-a-lign-external-london-wmevmb76awgk) — London, United Kingdom
- [Senior Sales Enablement Specialist](https://feeny.ai/job/senior-sales-enablement-specialist-a-lign-external-united-states-a1ez4zwp21ab) — United States
- [Business Development Representative](https://feeny.ai/job/business-development-representative-a-lign-external-london-vhn82vng01x0) — London, United Kingdom
- [Junior Legal Counsel](https://feeny.ai/job/junior-legal-counsel-a-lign-external-sofia-a6pfbr020v1z) — Sofia, Bulgaria
- [Senior GRC Engineer](https://feeny.ai/job/senior-grc-engineer-a-lign-external-panama-city-np9mzn0cje3y) — Panama City, Panama
- [Account Executive, Expansion - Enterprise](https://feeny.ai/job/account-executive-expansion-enterprise-a-lign-external-united-states-d9kq1wj5mmhz) — United States