Description review
Penetration Tester (1099 Independent Contractor, U.S.-Based)
Socium Security · United States · back to the listing
HR standards
59/100
needs work
Title ↔ description
92/100
strong
Reads as
Security Engineer
91% confident
What this role officially is
ICT security administrator — ESCO, the EU occupation classification
ICT security administrators plan and carry out security measures to protect information and data from unauthorised access, deliberate attack, theft and corruption.
Also known as: network security administrator, system security administrator, ICT security administrators, IT security administrator
How others title the same work
Large employers
- Security Risk Management Specialist Canonical Ltd.
- Security Software Engineer Canonical Ltd.
- Senior Security Operations Engineer Canonical Ltd.
- Staff Security Operations Engineer Canonical Ltd.
- Ubuntu Security Engineer Canonical Ltd.
Startups
- Security Engineer (Bangalore, India) AiPrise
- Security & Trust Engineer Alex
- Elucid | Senior Security Engineer | Boston, MA | ONSITE (hybrid) | $130k–$170k Elucid
- Factory | Security Engineer | ONSITE, San Francisco, CA | Full-Time Factory
- Factory | Security Engineer | Onsite in San Francisco | Full-time Factory
What the listing never says
- 17 bullet points. Long requirement lists deter qualified candidates, who read them as hard gates. Scope clarity
- No pay range published. Candidates cannot tell whether applying is worth their time. Pay transparency
- No location or timezone policy stated, so a candidate cannot tell where they may work from. Scope clarity
The listing, marked up
About Socium Security
Socium Security is a modern cybersecurity partner built for organizations that need clarity, speed, and measurable impact. We help leadership teams safeguard what matters most—protecting value, reducing operational risk, and strengthening resilience across every stage of organizational growth.
Grounded in curiosity, authenticity, adaptability, and practical execution, we challenge assumptions and deliver clear, actionable intelligence - not theoretical checklists. Our approach blends strategic advisory with hands-on technical expertise, ensuring decisions are informed, investments are prioritized, and security programs mature with purpose.
With decades of experience supporting Fortune 500 enterprises, global brands, and high-growth companies, our leadership brings deep, real-world insight into complex environments, operational maturity models, and the risk factors that directly influence organizational performance.
Penetration Tester (1099 Independent Contractor, U.S.-Based)
Socium is seeking a U.S.-based independent penetration testing consultant to support client engagements on a project basis. This role is best suited for a mid-to-senior tester who can independently execute scoped assessments, validate real-world exploitability through manual testing, and deliver polished client-ready reports and debriefs.
Primary responsibilities
• Conduct web application, API, external/internal network, and selected cloud penetration tests within agreed rules of engagement
• Manually validate findings, distinguish exploitable risk from noise, and chain issues where appropriate
• Produce deliverable reports with executive summary, technical details, evidence, reproduction steps, and prioritized remediation guidance
• Present results to technical and non-technical stakeholders and support limited retesting tied to the engagement scope
Required experience
• 5+ years of professional penetration testing experience
• 3+ years leading client-facing consulting engagements or equivalent
• Strong hands-on depth in at least two of the following: web applications/APIs, external/internal network testing, Active Directory, AWS/Azure/GCP testing
• Strong written communication and report-writing skills
• Experience with Burp Suite Pro, Nmap, Metasploit, and scripting in Python, Bash, or PowerShell
Preferred
• Mobile testing, social engineering, or adversary simulation experience
• Relevant certifications such as OSCP, OSEP, OSWE, GWAPT, GPEN, GXPN, PNPT, 1 or CPTS
• Experience presenting findings to clients or executives
Contract terms
• 1099 independent contractor engagement
• Must reside and perform services within the United States
• Must be able to provide a W-9 and invoice as a U.S.-based individual or business
• No third-party agencies, staffing firms, or offshore subcontracting
• Contractor is responsible for standard tooling and methods used to meet agreed deliverables, subject to client testing windows and rules of engagement
Originally posted on Himalayas
Socium Security is a modern cybersecurity partner built for organizations that need clarity, speed, and measurable impact. We help leadership teams safeguard what matters most—protecting value, reducing operational risk, and strengthening resilience across every stage of organizational growth.
Grounded in curiosity, authenticity, adaptability, and practical execution, we challenge assumptions and deliver clear, actionable intelligence - not theoretical checklists. Our approach blends strategic advisory with hands-on technical expertise, ensuring decisions are informed, investments are prioritized, and security programs mature with purpose.
With decades of experience supporting Fortune 500 enterprises, global brands, and high-growth companies, our leadership brings deep, real-world insight into complex environments, operational maturity models, and the risk factors that directly influence organizational performance.
Penetration Tester (1099 Independent Contractor, U.S.-Based)
Socium is seeking a U.S.-based independent penetration testing consultant to support client engagements on a project basis. This role is best suited for a mid-to-senior tester who can independently execute scoped assessments, validate real-world exploitability through manual testing, and deliver polished client-ready reports and debriefs.
Primary responsibilities
• Conduct web application, API, external/internal network, and selected cloud penetration tests within agreed rules of engagement
• Manually validate findings, distinguish exploitable risk from noise, and chain issues where appropriate
• Produce deliverable reports with executive summary, technical details, evidence, reproduction steps, and prioritized remediation guidance
• Present results to technical and non-technical stakeholders and support limited retesting tied to the engagement scope
Required experience
• 5+ years of professional penetration testing experience
• 3+ years leading client-facing consulting engagements or equivalent
• Strong hands-on depth in at least two of the following: web applications/APIs, external/internal network testing, Active Directory, AWS/Azure/GCP testing
• Strong written communication and report-writing skills
• Experience with Burp Suite Pro, Nmap, Metasploit, and scripting in Python, Bash, or PowerShell
Preferred
• Mobile testing, social engineering, or adversary simulation experience
• Relevant certifications such as OSCP, OSEP, OSWE, GWAPT, GPEN, GXPN, PNPT, 1 or CPTS
• Experience presenting findings to clients or executives
Contract terms
• 1099 independent contractor engagement
• Must reside and perform services within the United States
• Must be able to provide a W-9 and invoice as a U.S.-based individual or business
• No third-party agencies, staffing firms, or offshore subcontracting
• Contractor is responsible for standard tooling and methods used to meet agreed deliverables, subject to client testing windows and rules of engagement
Originally posted on Himalayas