Penetration Tester

Penetration Tester contract opportunity based in Chaska, MN (onsite) with Themesoft Inc for 6-12+ months
.

• Use AI/GenAI to speed up penetration testing across the lifecycle, including reconnaissance, test-case generation, analysis, scripting, and reporting.
• Conduct security testing for web applications, APIs, networks, cloud environments, and systems
  .
• Identify, validate, and document security vulnerabilities and weaknesses
  .
• Perform controlled exploitation to evaluate impact and risk of findings.
• Run vulnerability assessments using manual and automated testing approaches and tools.
• Create detailed security assessment reports with remediation recommendations
  .
• Partner with development and infrastructure teams to help resolve security issues.
• Conduct security reviews to support organizational and industry compliance requirements.
• Support secure software development and security best practices.

• Advanced Penetration Testing & Vulnerability Assessment
  .
• Minimum 3+ years experience performing penetration testing and vulnerability assessments.
• Experience testing web applications, APIs, networks, and cloud environments
  .
• Hands-on use of industry-standard security testing tools and exploit frameworks
  .
• Ability to identify, validate, and document security vulnerabilities.
• Exposure to secure coding practices and application security concepts.
• Experience producing security assessment reports and presenting findings to stakeholders
  .
• Understanding of cybersecurity threats, attack methodologies, and defense mechanisms.
• Preferred certifications:
  CEH
  , OSCP
  , GPEN
  , PNPT
  .
• Ability to assess prompt injection
  , insecure model/application interactions, sensitive information exposure, excessive agency, and other LLM application risks.
• Ability to identify attack surfaces across models, data, applications, APIs, RAG pipelines, and agents
  , using frameworks such as MITRE ATLAS
  .
• Ability to use approved LLM/AI tools for test-case generation, reconnaissance analysis, vulnerability analysis, scripting, and report generation.

• Burp Suite Professional
  , OWASP ZAP
• Metasploit
  , Nessus
  , Qualys
• Nmap
  , Wireshark
  , Kali Linux
• Python
  , Power Shell
  , Bash/Shell Scripting
• OWASP
  , PTES
  , NIST
  , MITRE ATLAS
• AWS
  , Azure
  , GCP
• Android
  , iOS
• Active Directory
• ISO 27001
  , PCI-DSS
  , SOC2

• Applicants must be legally authorized to work in the United States
  .

• Themesoft Inc is an Equal Employment Opportunity employer.
• Considers qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, or any other status protected by applicable federal, state, or local law.

Compensation: USD 60 per hour |
Experience: 3+ years |
Job Type: Contract |
Location: Chaska, MN (onsite)