Senior Penetration Testing Engineer

Who we are

DigiCert is a global leader in intelligent trust. We protect the digital world by ensuring the security, privacy, and authenticity of every interaction. Our AI-powered DigiCert ONE platform unifies PKI, DNS, and certificate lifecycle management, to secure infrastructure, software, devices, messages, AI content and agents. Learn why more than 100,000 organizations, including 90% of the Fortune 500, choose DigiCert to stop today’s threats and prepare for a quantum-safe future at www.digicert.com

Job summary

We're looking for a Senior Penetration Testing Engineer to conduct comprehensive security assessments and support our digital trust initiatives. You'll perform hands-on penetration testing across our applications, infrastructure, and services while contributing to our organization's security posture and customer trust commitments.

What you will do

• Help establish and mature our penetration testing program, methodologies, and standard operating procedures

• Build relationships with stakeholders across product, engineering, and compliance teams

• Create detailed testing reports and security recommendations

• Support risk assessment activities and security control validation

• Conduct comprehensive penetration tests against web applications, APIs, and mobile applications

• Perform network penetration testing and infrastructure security assessments

• Execute social engineering assessments and physical security evaluations

• Test cloud environments and containerized applications for security vulnerabilities

• Conduct red team exercises and adversarial simulations

• Perform threat modeling and attack surface analysis for critical systems

• Support digital trust initiatives and regulatory compliance requirements through security validation testing

• Contribute to security certifications, audit processes, and customer trust commitments

• Assess third-party integrations and vendor security postures

What you will have

• 5+ years in penetration testing, ethical hacking, or offensive security

• Previous experience with standing up a penetration testing program

• Strong knowledge of web application security testing (OWASP methodology)

• Experience with network penetration testing tools and techniques

• Proficiency with testing frameworks (Metasploit, Burp Suite, Nmap, etc.)

• Understanding of cloud security across AWS, Azure, or GCP platforms

• Knowledge of compliance frameworks (SOC 2, PCI DSS, ISO 27001)

Nice to have

• Security certifications (OSCP, CISSP, CEH, GPEN, GWEB)

• Background in digital trust, privacy, or regulatory compliance

• Red team or adversarial simulation experience

• Scripting and automation skills (Python, PowerShell, Bash)

Benefits

• Generous time off policies

• Top shelf benefits

• Education, wellness and lifestyle support

#LI-SS1