Description

You will perform manual application penetration testing across diverse environments and platforms.

This role is remote.

Responsibilities

• Execute manual penetration testing against APIs (REST/SOAP), web applications, mobile applications, and thick client applications.
• Conduct threat modeling, business logic evaluations, and application architecture reviews.
• Develop and exploit proofs of concept (POCs) during objective-based, abstract engagements.
• Communicate testing processes, techniques, and results to both technical and non-technical audiences.
• Guide technical teams on remediation options and assist clients in evaluating those solutions.

Required Skills

• 3+ years of recent experience in application penetration testing.
• Proven experience testing APIs (REST/SOAP), web applications, and mobile applications.
• Proficiency with Burp Suite Pro and other application testing tools such as Netsparker.
• Ability to work independently on engagements with minimal oversight.
• Strong communication skills for leading remediation conversations and performing real-time demos.
• Bachelor's degree from an accredited college/university or equivalent industry experience.
• Must be located onshore in the USA.

Preferred Skills

• Ethical hacking certifications such as GWAPT, CREST, OSWE, or OSWA.

Key Skills

Education

Bachelor's degree