Penetration Tester Independent Contractor
About Socium Security Socium Security is a modern cybersecurity partner built for organizations that need clarity, speed, and measurable impact. We help leadership teams safeguard what matters most—protecting value, reducing operational risk, and strengthening resilience across every stage of organizational growth. Grounded in curiosity, authenticity, adaptability, and practical execution, we challenge assumptions and deliver clear, actionable intelligence - not theoretical checklists. Our approach blends strategic advisory with hands-on technical expertise, ensuring decisions are informed, investments are prioritized, and security programs mature with purpose. With decades of experience supporting Fortune 500 enterprises, global brands, and high-growth companies, our leadership brings deep, real-world insight into complex environments, operational maturity models, and the risk factors that directly influence organizational performance. Penetration Tester / Senior Penetration Tester (1099 Independent Contractor, U.S.-Based) Socium is seeking a U.S.-based independent penetration testing consultant to support client engagements on a project basis. This role is best suited for a mid-to-senior tester who can independently execute scoped assessments, validate real-world exploitability through manual testing, and deliver polished client-ready reports and debriefs. Primary responsibilities
- Conduct web application, API, external/internal network, and selected cloud penetration tests within agreed rules of engagement
- Manually validate findings, distinguish exploitable risk from noise, and chain issues where appropriate
- Produce deliverable reports with executive summary, technical details, evidence, reproduction steps, and prioritized remediation guidance
- Present results to technical and non-technical stakeholders and support limited retesting tied to the engagement scope
Required experience
- 5+ years of professional penetration testing experience
- 3+ years leading client-facing consulting engagements or equivalent
- Strong hands-on depth in at least two of the following: web applications/APIs, external/internal network testing, Active Directory, AWS/Azure/GCP testing
- Strong written communication and report-writing skills
- Experience with Burp Suite Pro, Nmap, Metasploit, and scripting in Python, Bash, or PowerShell
Preferred
- Mobile testing, social engineering, or adversary simulation experience
- Relevant certifications such as OSCP, OSEP, OSWE, GWAPT, GPEN, GXPN, PNPT, or CPTS
- Experience presenting findings to clients or executives
Contract terms
- 1099 independent contractor engagement
- Must reside and perform services within the United States
- Must be able to provide a W-9 and invoice as a U.S.-based individual or business
- No third-party agencies, staffing firms, or offshore subcontracting
- Contractor is responsible for standard tooling and methods used to meet agreed deliverables, subject to client testing windows and rules of engagement