# Cobalt Core Pentester

**Company:** [Cobalt.io](https://hotfix.jobs/companies/cobalt-io)
**Location:** Remote
**Role:** Security Engineering
**Skills:** Penetration Testing, Owasp Top 10, Web Application Security, Api Testing, Network Penetration Testing, Mobile App Testing, Ios Security, Android Security, Vulnerability Assessment, Manual Testing
**Posted:** 2026-02-18

> Performs manual penetration testing on web apps, APIs, networks, and iOS/Android mobile apps as part of a pentest team. Documents findings, validates vulnerabilities, and targets OWASP Top 10; not entry-level, freelance part-time role.

## Job Description

## Responsibilities
- Perform manual penetration testing of web applications, APIs, internal and external networks, iOS and Android mobile applications.
- Work as a member of a pentest team, collaborating and engaging directly with clients.
- Document in detail the results of assessments, audits, tests, and verification activities.
- Perform manual validation of vulnerabilities.
- Perform mobile and web app pentesting for OWASP top 10 vulnerabilities.

## Nice-to-Haves
**Certifications:** CREST, PenTest+, GPEN, CEH, OSCP, AWS, CISSP, eCPPT, eWAPT, OSCE, OSWE

## Similar roles

- [Security Program Manager](https://hotfix.jobs/jobs/e7f7fcaf-1979-4194-9131-83689809fe47) - Forus - New York, NY
- [Safeguards Enforcement Analyst, Account Takeover & Credential Abuse](https://hotfix.jobs/jobs/31f5d0ec-9b31-4419-a4b1-2e826ec7a358) - Anthropic - San Francisco, CA - $245k – $285k/yr
- [Application Security Engineer](https://hotfix.jobs/jobs/d240253e-6098-4419-8f04-aaf793f42c03) - Zocdoc - Remote - $100k – $140k/yr
- [Detection & Mitigation Engineer](https://hotfix.jobs/jobs/61def9c4-f4a5-41a5-99c6-579a61033a73) - Cloudflare
- [Security & Compliance Operations Manager](https://hotfix.jobs/jobs/90ac6643-526f-4aeb-bb4f-d71bc1af1fcd) - Mintlify - San Francisco, CA - $120k – $180k/yr

**Apply:** https://hotfix.jobs/jobs/59222184-1c88-4f7e-a2b5-2336a7665c58
**Canonical:** https://hotfix.jobs/jobs/59222184-1c88-4f7e-a2b5-2336a7665c58