Green Card Penetration Tester Jobs
Penetration tester green card sponsorship follows the EB-2 or EB-3 employment-based path, requiring your employer to complete PERM labor certification with the Department of Labor before filing an I-140 petition with USCIS. Nationals from high-demand countries should factor in priority-date backlogs when planning their timeline. Demand for credentialed offensive-security professionals makes this role well-suited for employer-sponsored permanent residency.
Find Green Card Penetration Tester JobsOverview
Showing 5 of 720+ Penetration Tester jobs
See all 720+ Penetration Tester Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Penetration Tester roles.
Get Access To All JobsINTRODUCTION
Forward Financing is a financial technology company based in Boston, Massachusetts with team members throughout the United States, Dominican Republic, and Canada. The company is on a mission to unlock the capital that fuels small businesses across America. Recognized as a Best Place to Work by Built In Boston and certified as a Great Place To Work, Forward is investing in its employees, technology, and customer experience – with long-term success in mind every step of the way.
As a Senior Penetration Tester, you'll find the vulnerabilities in Forward Financing's software before an attacker does. You'll pentest our core systems along with the AI systems and agents our engineers are shipping, and help shape how we test software that AI helped write. Our engineering organization is moving fast with AI, and our security testing needs to move at the same pace.
ROLE AND RESPONSIBILITIES
In this role you will:
- Conduct manual penetration tests against each of our systems, and build the AI-assisted tooling and automation that extends how much ground those tests can cover.
- Help define how we pentest AI. Bring us new ideas for testing LLM applications, agents, and agent-generated code, and build the ones that work into our regular testing.
- Triage findings from our SAST tools, fix the vulnerabilities that are real, and tune the rules that produce false positives.
- Perform secure code review across web applications, APIs, and AWS infrastructure.
- Build tooling and security services within the Forward application stack, including AI-assisted tooling that speeds up the security team's own work.
- Support the test-to-production review process so AI-built work is security-reviewed before promotion.
- Explain risk to engineers in enough detail that they can prioritize and fix what you found.
WHY YOU SHOULD APPLY
- Shape a growing function: Our security program is early enough that your work sets the standard. You'll have influence over how we test, what tooling we build, and how we secure AI-built software.
- Mission driven company: Forward is a trusted source of fast, flexible funding for small businesses that have often been underserved by traditional financing options. When you join the team, you will help ensure all small businesses have access to the financial support they need to succeed.
- Flexibility is a top priority: Our employees are empowered to choose where they want to work (whether that’s from home, in the office, or a combination of both) with flexible hours.
ROLE REQUIREMENTS
- 5+ years in application security, offensive security, or product security.
- Hands-on pentesting and code-review depth across web applications, APIs, and cloud infrastructure (AWS).
- A hacker mentality. You're curious about how systems break, and you keep pulling on threads after the scanner comes back clean.
- Interest in using AI to solve problems, whether that's in your own workflow or in the systems you're testing.
- Understanding of AI/LLM attack surface: prompt injection, insecure agent tool use, and vulnerabilities characteristic of AI-generated code.
- Experience with modern programming languages such as Ruby, Python, TypeScript, or Go, and with secure SDLC practices.
- Ability to communicate risk and priorities to other security and software engineers.
- Typically has a Bachelor's Degree in Computer Science or equivalent technical degree, or equivalent industry experience.
NICE TO HAVE
- Experience pentesting or red-teaming LLM applications and agentic systems.
- OSCP/OSWE or comparable offensive certifications.
- Experience contributing to bug-bounty or external testing programs.
- Background in fintech or other regulated environments.
COMPENSATION
Annual Targeted Salary: $143,000-$183,000 CAD
Annual Target Bonus: 10%
At Forward Financing, we're committed to fair and transparent compensation. We believe in providing a compensation package that recognizes your skills, experience, and the unique value you bring to our team. We take a market-based approach to pay, regularly reviewing benchmark data to ensure our compensation remains competitive, equitable, and aligned with our performance-driven culture.
Final offers are determined by a variety of factors, including the candidate's qualifications, relevant experience, specific skills, and internal equity. This approach ensures that our compensation is competitive and equitable. Your recruiter will provide specific details on the expected base and variable earnings as it pertains to this specific role. This position is to fill an existing vacancy.
TOTAL REWARDS
Additionally, we offer a comprehensive total rewards package, including but not limited to: medical, dental, vision, a flexible time-off policy, paid parental leave, RRSP match, wellness reimbursement, volunteering days, annual professional development budget, and charitable donation match.
Forward is proud to be a remote-first company, keeping workplace flexibility a top priority for our employees. As a business, we are focused on impact; we are more concerned with your contributions to the success of the company than where you get your work done. To help facilitate in-person collaboration, employees are welcome to work from one of our premiere office locations.
When we aren’t collaborating to drive business and support our customers, we’re finding virtual and in-person ways to get to know our colleagues, celebrate team wins, and have fun together!
OUR CULTURE: THE FORWARD COMPASS
The Forward Compass is the standard we hold for ourselves and one another—guiding how we lead, collaborate, and show up every day to move in the same direction.
- Back the Builders: We are wired to fuel customer progress, not just provide support.
- Rooted in People: We create an environment that balances deep connection with the extreme ownership and honesty required to reach our highest potential.
- Flying V: We move through coordinated effort with speed and urgency to achieve what no individual could do alone.
- Always Forward, Never Finished: We pursue growth with a relentless drive that keeps us ahead of the competition.
About us
Forward Financing is a fintech company based in Boston, Massachusetts with team members throughout the United States, Dominican Republic, and Canada. The company is on a mission to unlock the capital that fuels small businesses across America. Whether facing challenges accessing traditional financing or simply needing a convenient, flexible solution, Forward is committed to funding more of the millions of small businesses nationwide. By simplifying the requirements, streamlining the process, and using advanced proprietary technology, Forward is often able to deliver approvals within hours and funds that same day – giving more businesses the financial opportunity they need to thrive. Plus, with their dedicated teams and award-winning service, customers get personalized support when they need it most.
Since 2012, Forward has expanded access to capital by providing over $4.8 billion in funding to more than 92,000 small businesses. The company is A+ rated by the Better Business Bureau with an Excellent / 4.7 stars rating on Trustpilot.com. Recognized as a Best Place to Work by Built In Boston and certified as a Great Place To Work, Forward is dedicated to empowering both its team and the customers they serve, helping them succeed and thrive.
EQUAL OPPORTUNITY EMPLOYMENT INFORMATION
It is the policy of Forward Financing to ensure equal employment opportunity without discrimination or harassment on the basis of race, religion, national origin, status, age, sex, sexual orientation, gender identity or expression, marital or domestic/civil partnership status, disability, veteran status, genetic information, or any other basis protected by law. We welcome and encourage applications from people with disabilities. Please let us know should you require any accommodations. As part of our commitment to a streamlined and equitable hiring experience, we use AI tools to assist with candidate screening and assessment.
Compensation Range: $145K - $183K
INTRODUCTION
Forward Financing is a financial technology company based in Boston, Massachusetts with team members throughout the United States, Dominican Republic, and Canada. The company is on a mission to unlock the capital that fuels small businesses across America. Recognized as a Best Place to Work by Built In Boston and certified as a Great Place To Work, Forward is investing in its employees, technology, and customer experience – with long-term success in mind every step of the way.
As a Senior Penetration Tester, you'll find the vulnerabilities in Forward Financing's software before an attacker does. You'll pentest our core systems along with the AI systems and agents our engineers are shipping, and help shape how we test software that AI helped write. Our engineering organization is moving fast with AI, and our security testing needs to move at the same pace.
ROLE AND RESPONSIBILITIES
In this role you will:
- Conduct manual penetration tests against each of our systems, and build the AI-assisted tooling and automation that extends how much ground those tests can cover.
- Help define how we pentest AI. Bring us new ideas for testing LLM applications, agents, and agent-generated code, and build the ones that work into our regular testing.
- Triage findings from our SAST tools, fix the vulnerabilities that are real, and tune the rules that produce false positives.
- Perform secure code review across web applications, APIs, and AWS infrastructure.
- Build tooling and security services within the Forward application stack, including AI-assisted tooling that speeds up the security team's own work.
- Support the test-to-production review process so AI-built work is security-reviewed before promotion.
- Explain risk to engineers in enough detail that they can prioritize and fix what you found.
WHY YOU SHOULD APPLY
- Shape a growing function: Our security program is early enough that your work sets the standard. You'll have influence over how we test, what tooling we build, and how we secure AI-built software.
- Mission driven company: Forward is a trusted source of fast, flexible funding for small businesses that have often been underserved by traditional financing options. When you join the team, you will help ensure all small businesses have access to the financial support they need to succeed.
- Flexibility is a top priority: Our employees are empowered to choose where they want to work (whether that’s from home, in the office, or a combination of both) with flexible hours.
ROLE REQUIREMENTS
- 5+ years in application security, offensive security, or product security.
- Hands-on pentesting and code-review depth across web applications, APIs, and cloud infrastructure (AWS).
- A hacker mentality. You're curious about how systems break, and you keep pulling on threads after the scanner comes back clean.
- Interest in using AI to solve problems, whether that's in your own workflow or in the systems you're testing.
- Understanding of AI/LLM attack surface: prompt injection, insecure agent tool use, and vulnerabilities characteristic of AI-generated code.
- Experience with modern programming languages such as Ruby, Python, TypeScript, or Go, and with secure SDLC practices.
- Ability to communicate risk and priorities to other security and software engineers.
- Typically has a Bachelor's Degree in Computer Science or equivalent technical degree, or equivalent industry experience.
NICE TO HAVE
- Experience pentesting or red-teaming LLM applications and agentic systems.
- OSCP/OSWE or comparable offensive certifications.
- Experience contributing to bug-bounty or external testing programs.
- Background in fintech or other regulated environments.
COMPENSATION
Annual Targeted Salary: $143,000-$183,000 CAD
Annual Target Bonus: 10%
At Forward Financing, we're committed to fair and transparent compensation. We believe in providing a compensation package that recognizes your skills, experience, and the unique value you bring to our team. We take a market-based approach to pay, regularly reviewing benchmark data to ensure our compensation remains competitive, equitable, and aligned with our performance-driven culture.
Final offers are determined by a variety of factors, including the candidate's qualifications, relevant experience, specific skills, and internal equity. This approach ensures that our compensation is competitive and equitable. Your recruiter will provide specific details on the expected base and variable earnings as it pertains to this specific role. This position is to fill an existing vacancy.
TOTAL REWARDS
Additionally, we offer a comprehensive total rewards package, including but not limited to: medical, dental, vision, a flexible time-off policy, paid parental leave, RRSP match, wellness reimbursement, volunteering days, annual professional development budget, and charitable donation match.
Forward is proud to be a remote-first company, keeping workplace flexibility a top priority for our employees. As a business, we are focused on impact; we are more concerned with your contributions to the success of the company than where you get your work done. To help facilitate in-person collaboration, employees are welcome to work from one of our premiere office locations.
When we aren’t collaborating to drive business and support our customers, we’re finding virtual and in-person ways to get to know our colleagues, celebrate team wins, and have fun together!
OUR CULTURE: THE FORWARD COMPASS
The Forward Compass is the standard we hold for ourselves and one another—guiding how we lead, collaborate, and show up every day to move in the same direction.
- Back the Builders: We are wired to fuel customer progress, not just provide support.
- Rooted in People: We create an environment that balances deep connection with the extreme ownership and honesty required to reach our highest potential.
- Flying V: We move through coordinated effort with speed and urgency to achieve what no individual could do alone.
- Always Forward, Never Finished: We pursue growth with a relentless drive that keeps us ahead of the competition.
About us
Forward Financing is a fintech company based in Boston, Massachusetts with team members throughout the United States, Dominican Republic, and Canada. The company is on a mission to unlock the capital that fuels small businesses across America. Whether facing challenges accessing traditional financing or simply needing a convenient, flexible solution, Forward is committed to funding more of the millions of small businesses nationwide. By simplifying the requirements, streamlining the process, and using advanced proprietary technology, Forward is often able to deliver approvals within hours and funds that same day – giving more businesses the financial opportunity they need to thrive. Plus, with their dedicated teams and award-winning service, customers get personalized support when they need it most.
Since 2012, Forward has expanded access to capital by providing over $4.8 billion in funding to more than 92,000 small businesses. The company is A+ rated by the Better Business Bureau with an Excellent / 4.7 stars rating on Trustpilot.com. Recognized as a Best Place to Work by Built In Boston and certified as a Great Place To Work, Forward is dedicated to empowering both its team and the customers they serve, helping them succeed and thrive.
EQUAL OPPORTUNITY EMPLOYMENT INFORMATION
It is the policy of Forward Financing to ensure equal employment opportunity without discrimination or harassment on the basis of race, religion, national origin, status, age, sex, sexual orientation, gender identity or expression, marital or domestic/civil partnership status, disability, veteran status, genetic information, or any other basis protected by law. We welcome and encourage applications from people with disabilities. Please let us know should you require any accommodations. As part of our commitment to a streamlined and equitable hiring experience, we use AI tools to assist with candidate screening and assessment.
Compensation Range: $145K - $183K
See all 720+ Green Card Penetration Tester Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Green Card Penetration Tester Jobs.
Get Access To All JobsTips for Finding Green Card Sponsorship as a Penetration Tester
Align your credentials to EB-2 requirements
An advanced degree in computer science, information security, or a related field qualifies you for the EB-2 category. If you hold only a bachelor's degree, five years of progressive penetration testing experience documented through employer letters and project records can substitute.
Target employers with active PERM filing history
Use Migrate Mate to search for employers with verified employment-based green card sponsorship history in cybersecurity and information security roles, so you're applying to companies that have already run the PERM process for comparable positions.
Verify your role meets DOL prevailing wage requirements
Before accepting an offer, run your job title and location through the OFLC Wage Search to confirm the offered salary meets or exceeds the prevailing wage for your SOC code. A wage shortfall is one of the most common reasons PERM applications stall after the recruitment phase.
Get your security certifications documented before PERM starts
PERM labor certification includes a recruitment test where your employer must demonstrate no qualified U.S. workers are available. Certifications like OSCP or CEH, listed in the job description from the outset, narrow the qualified applicant pool to candidates with your specific skill set.
Understand how priority dates affect your green card timeline
Once your employer files the I-140, your priority date is set. If you're a national of India or China, check the DOS Visa Bulletin monthly for your preference category's cutoff date. Your I-485 adjustment of status can't be filed until your priority date becomes current.
Protect your priority date if you change employers
Once your original I-140 is approved, the priority date can transfer to a new employer's I-140 petition. If your I-485 has been pending 180 days or more, AC21 portability also lets you move to a same or similar occupation without restarting the green card process from PERM.
Green Card Penetration Tester: Frequently Asked Questions
Which green card category fits a penetration tester role?
Most penetration tester positions qualify under EB-2 if the role requires a master's degree or a bachelor's degree plus five years of progressive experience in information security. EB-3 applies to roles requiring a bachelor's degree or at least two years of specialized experience. Your employer's PERM job description determines which category USCIS adjudicates.
How is green card sponsorship different from H-1B sponsorship for penetration testers?
H-1B visa is a temporary work visa renewed in cycles, while green card sponsorship through EB-2 or EB-3 leads to lawful permanent residence. Green card sponsorship requires PERM labor certification filed with the Department of Labor, a prevailing wage determination, and a formal recruitment test before the I-140 is filed with USCIS. There is no lottery, but per-country limits create priority-date backlogs for some nationals.
What does the PERM recruitment process look like for a cybersecurity role?
Your employer must advertise the penetration tester position through DOL-mandated recruitment channels, including two Sunday newspaper ads, a job posting, and additional steps, then wait 30 to 180 days before filing. The job description must reflect actual minimum requirements, and the employer must document that no qualified U.S. workers applied and were rejected for lawful reasons.
How do I find employers who sponsor green cards for penetration tester jobs?
Search Migrate Mate for penetration tester and information security roles filtered by employers with verified employment-based green card sponsorship history. Focusing on companies that have completed the PERM and I-140 process for similar roles reduces the time you spend in exploratory conversations with employers unfamiliar with the sponsorship process.
Can I switch employers after my green card sponsorship is underway?
Yes, under two distinct rules. If your original I-140 was approved, a new employer can file a fresh I-140 and retain your original priority date. Separately, if your I-485 has been pending 180 days or more, AC21 portability lets you move to a same or similar occupation without restarting the PERM process, as long as the new role remains in information security or a closely related field.