Application Penetration Tester
New
J
JobgetherApplication security
Based in the United StatesFull-TimeMiddle
Salary109,600 - 137,000 USD per year
Apply NowOpens the employer's application page
Job Details
- Experience
- At least 3 years of professional experience in secure code review; at least 3 years of practical experience with SAST and DAST; 3+ years of hands-on experience conducting manual penetration testing of web applications and REST APIs.
- Required Skills
- JavaJavascriptCI/CDScala
Requirements
- At least 3 years of professional experience in secure code review, particularly with Java, Scala, JavaScript, and the Spring Framework.
- At least 3 years of practical experience with Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST).
- At least 3 years of hands-on experience conducting manual penetration testing of web applications and REST APIs using Burp Suite Professional and tools such as Postman or Bruno.
- Strong understanding of secure coding practices, application security principles, and DevSecOps methodologies.
- In-depth knowledge of the OWASP Top 10 and SANS Top 25, including associated security risks and testing guidelines.
- Familiarity with CI/CD processes, AWS security principles, Jenkins, and GitHub.
- Ability to analyze complex security findings, communicate technical risks, and provide remediation guidance.
- Strong analytical, problem-solving, communication, and technical documentation skills.
- Must successfully pass a federal background investigation to obtain access to sensitive information.
- Preferred certifications include GPEN, GWAPT, OSCP, or CompTIA PenTest+.
Responsibilities
- Collaborate with development teams and stakeholders to translate security requirements into application security measures.
- Establish and promote application security best practices aligned with industry standards.
- Assess third-party libraries, software components, and dependencies for security risks.
- Conduct manual and automated secure code reviews of Java and Scala applications and recommend remediation.
- Analyze SAST, DAST, and SCA findings and provide actionable recommendations.
- Perform static, dynamic, and manual penetration testing of web applications and REST APIs, primarily using Burp Suite.
- Review software security architecture and application designs, identifying weaknesses and recommending improvements.
- Prepare security assessment reports documenting vulnerabilities, risk levels, test outcomes, and remediation recommendations.
- Demonstrate vulnerabilities to application owners and guide technical teams through remediation.
- Develop scripts and integrate security tools into DevOps and CI/CD pipelines to automate application security testing.
View Full Description & ApplyYou'll be redirected to the employer's site
