below marketmost similar roles pay hereabove market
This role pays less than
59%
of similar roles. Most pay
$142,400–$193,000
— the blue band above.
At the midpoint, this role pays about
$159k
versus about
$168k
for comparable roles.
Based on 240 similar postings.
Employer
About CoStar Group
CoStar Group is the leading provider of commercial real estate information, analytics, and online marketplaces, including CoStar, Apartments.com, and LoopNet platforms. Industry: Commercial Real Estate Data & Analytics
CoStar Group currently has
59 open roles
on FindRole.
Listed pay typically runs
$133,000–$190,000
across 59 roles with salary data.
The Senior Penetration Tester joins the security team to evolve pentesting capabilities for internal and external processes, infrastructure, and applications. This role involves leading penetration tests on web applications and underlying infrastructure using manual and automated techniques. The successful candidate will develop test plans to validate vulnerabilities, demonstrate exploitability to engineering teams and senior leadership, and collaborate on purple team exercises. Key responsibilities include growing capabilities in cloud-native domains, performing secure code reviews, and recommending remediations for root causes. Required skills include proficiency in Python, PowerShell, C#, Java, JavaScript, or Go, alongside experience with Burp Suite, OWASP ZAP, Nmap, Bloodhound, and Metasploit. The role addresses security risks across Active Directory, AWS, Kubernetes, CI/CD pipelines, and mobile applications, while staying current with adversary tradecraft.
Penetration Testing
Red Teaming
Offensive Security
Python
Bash
PowerShell
Burp Suite
Metasploit
Nmap
Kali Linux
Pentera
Vulnerability Assessment
OWASP
MITRE ATT&CK
CVE
Network Security
Application Security
Linux
Windows
Penetration Testing
MITRE ATT&CK
Linux
Windows
Network Security Analysis
Traffic Analysis
Java
Ruby
Python
JavaScript
Rust
C
Atomic Red Team
Scythe
Mandiant ASV
AttackIQ
Security Architecture
Penetration Testing
Red Team Operations
Kali
Metasploit
NMAP
Cobalt Strike
Wireshark
tcp dump
Java
PHP
SQL
No SQL
HTML
Linux
Windows
Reverse Engineering
Risk Management Framework (RMF)
Group Policy Object’s (GPOs
WSUS
Penetration Testing
Red Team Operations
Metasploit
NMAP
Cobalt Strike
Wireshark
tcp dump
Java
PHP
SQL
No SQL
HTML
Linux
Windows
Reverse Engineering
C2
Risk Management Framework (RMF)
Group Policy Object’s (GPO
WSUS