Security / Penetration Tester (Authorized Testing)
You will run authorized security assessments on our client web apps, APIs and cloud setups, and help fix what you find. All testing is performed only with written authorization and within an agreed scope.
| Employer | O1D Match (o1dmatch.com) |
|---|---|
| Pay | USD 25 to 300+ per hour, depending on the project and your experience. |
| Location | Fully remote, open worldwide. No country restriction. |
| Type | Freelance contract, project-based, flexible hours |
| How to apply | workwithus.o1dmatch.com (assessment required) |
About the role
O1D Match helps exceptional professionals understand and pursue the U.S. O-1 visa. We work with startups and entertainers to build custom solutions, and we need skilled people on O1D projects. You will run authorized security assessments on our client web apps, APIs and cloud setups, and help fix what you find. All testing is performed only with written authorization and within an agreed scope.
Responsibilities
- Run authorized penetration tests on web apps, APIs and mobile apps within a written scope
- Review authentication, access control, secrets handling and cloud configuration
- Check for leaked keys and insecure integrations in code repositories
- Write clear findings reports with severity, evidence and fix guidance
- Retest after fixes and advise developers on secure practices
Requirements
- 3+ years of application security or penetration testing experience
- Hands-on with Burp Suite, OWASP Top 10 and API security testing
- Experience reviewing Supabase, Vercel or similar cloud configurations
- Strict professional ethics; you test only what you are authorized to test
- Clear written reporting
Nice to have
OSCP, OSWE or similar certifications, secret-scanning tools, experience with LLM application security.
Location and hours
Fully remote. Flexible hours, project-based work. Engagements range from short fixes to longer builds, and you choose the projects that fit your schedule.
How to apply
- Apply at workwithus.o1dmatch.comTell us who you are and pick your strongest areas.
- Take the skills assessment (required)A short skills chat of about 8 real-world questions, under 10 minutes. Answer in your own words.
- Take the O-1 eligibility check (required)Applicants who score 30% or higher get a free O1DMatch profile, whether or not they get the job.
- Trial taskOur team reviews every application; shortlisted people get a short trial task.
The O-1 angle
Work on real U.S. projects can become part of an O-1 record. For people who become long-term contributors and whose record fits, O1D Match may consider supporting an O-1 petition. That is a possibility, not a promise, and it is not part of this offer. To see where you stand today, take the free eligibility check or the free course at educate.o1dmatch.com.
Visa eligibility depends on each person's own record; no outcome is promised. This is a freelance contract role, not an offer of visa support, and nothing on this page is legal advice.
