or apply directly on Bishop Fox's site. We never take the application ourselves.
Is this posting real?
- This role has been open
- 80 days Bishop Fox's roles stay open a median of 81 days
- Reposted
- No
- Salary listed
- No 0% of Bishop Fox's roles list one
- Ghost-job risk at Bishop Fox
- high 7 stale, 0 reposted of 7 open
- Hiring momentum
- 11 roles opened in the last 90 days ↑ up vs. the prior 90 days
- Last confirmed on the employer's board
- 2026-10-23
Measured from postings appearing on and disappearing from Bishop Fox's own greenhouse board since 2026-08-03. Full hiring picture for Bishop Fox.
About this role
As a Contract Penetration Tester at Bishop Fox, you will focus primarily on web application security while also leveraging your expertise in cloud, mobile, source code, network, or AI security. Your day-to-day responsibilities include conducting penetration tests, identifying vulnerabilities, validating risks, and communicating findings to both technical and executive stakeholders. You will collaborate with teams across the U.S. and internationally to support clients in securing their digital landscapes.
- benefits
- 1/5
- freshness
- 1/5
- career value
- 4/5
- role clarity
- 4/5
- pay transparency
- 0/5
Scored from the posting itself — how clearly the role is described, how much it says about pay and benefits, and how recently it was listed. Not a judgement of Bishop Fox as an employer.
What you need
- 5+ years of experience planning, conducting, and managing web application penetration tests
- Deep understanding of application security fundamentals, OWASP Top 10, common vulnerabilities, and secure development best practices
- Experience assessing vulnerabilities and developing exploits across diverse targets
- Strong understanding of system and network security, authentication protocols, security protocols, and applied cryptography
- Ability to communicate complex technical findings clearly and provide practical remediation guidance to technical and executive audiences
Nice to have
- Deep experience in cloud security, including assessing AWS environments
- Experience testing mobile applications on iOS and/or Android
- Experience evaluating applications across multiple layers, including source code and APIs, with proficiency in Golang and familiarity with other languages
- Experience with network and system exploitation and modern tactics
- Experience assessing non-deterministic security controls in AI/LLM security
Worth weighing
- This role is for independent contractors (1099) and does not offer employment sponsorship.
- Applicants must be located in the United States and authorized to work without visa sponsorship.
- All new hires must pass a background check.
Summarised from Bishop Fox's posting. Read the full original.
Listed by Bishop Fox on their greenhouse job board, last confirmed open on 2026-10-23. PitchMeAI is not the employer.
More roles at Bishop Fox
- Infrastructure EngineerU.S. Remote
- Account Executive - Pacific NorthwestU.S. Northwest