Web Application Penetration Tester

Hybrid in Pleasanton, CA, US • Posted 8 hours ago • Updated 8 hours ago

Full Time

Hybrid

$60 - $70/hr

Fitment

Dice Job Match Score™

🤯 Applying directly to the forehead...

Job Details

Skills

Penetration
OWASP Top 10
Java
CI/CD

Summary

Web Application Penetration Tester

Location: Pleasanton, CA (Onsite/Hybrid)

Duration: Contract (1 Year)

Role Overview

We are seeking a highly skilled Web Application Penetration Tester to perform in-depth security testing of mission-critical enterprise applications. This role is focused on manually identifying vulnerabilities, driving remediation efforts, and strengthening overall application security posture.

The ideal candidate is a hands-on security expert who can work closely with development teams, not only to uncover risks but also to ensure secure design and implementation. This is a technical, execution-driven role, requiring strong expertise in penetration testing, secure coding practices, and modern web application architectures.

Required Skills

Strong hands-on experience in web application penetration testing (manual testing mandatory)
Deep knowledge of OWASP Top 10 and common web security vulnerabilities
Proven ability to identify, exploit, and recommend remediation for vulnerabilities
Experience working with enterprise web applications and multi-tier architectures
Proficiency in Java and Spring framework
Strong experience with relational databases (Oracle preferred)
Working knowledge of Linux and Windows environments
Experience with security testing tools and frameworks
Ability to write automation scripts for repeated security testing
Experience conducting secure code reviews
Strong analytical and problem-solving skills
Ability to collaborate with cross-functional teams (Dev, QA, Business)
Strong written and verbal communication skills

Preferred Skills

Experience in regulated or enterprise environments
Familiarity with secure SDLC practices
Exposure to application architecture and secure design principles
Experience mentoring teams on secure coding practices
Knowledge of CI/CD pipelines and integrating security testing
Understanding of project management and documentation practices
Ability to translate technical security findings to non-technical stakeholders
Experience with test case creation, functional testing, and debugging support

Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.

Dice Id: 10271950
Position Id: 8933916
Posted 8 hours ago

Create job alert

Never miss an opportunity! Create an alert based on the job you applied for.

Similar Jobs

Web Application Penetration Tester

Hybrid in Pleasanton, California

•

Today

Position Title: Web Application Penetration TesterDuration: 1+ YearLocation: Pleasanton, CACandidates must be located in the Bay Area, who can be in the Pleasanton office as neededW2 Contract HybridMust-have requirements-Advanced knowledge web application penetration testing.Extensive knowledge of and proven experience with penetration testing of web applications, and methods and frameworks for identifying and remediating vulnerabilities.In-depth knowledge of OWASP Top 10 and other frameworks.Pr

Easy Apply

Contract

Depends on Experience

Web Application Penetration Tester

Hybrid in Pleasanton, California

•

3d ago

Web Application Penetration Tester Location - Bay Area, CA Candidates must be located in the Bay Area, who can be in the Pleasanton office as needed 12+ Months Must-have requirements- Advanced knowledge web application penetration testing. Extensive knowledge of and proven experience with penetration testing of web applications, and methods and frameworks for identifying and remediating vulnerabilities. In-depth knowledge of OWASP Top 10 and other frameworks. Proficient knowledge of Java, Sp

Easy Apply

Contract

Depends on Experience

Software Engineer - Testing 4

Pleasanton, California

•

Today

This posting is for a contract assignment and is not a full-time employment offer with Boeing. Candidates selected for roles will be employed as contract workers through a Boeing approved 3rd party for the duration of the specified project. Regular and predictable attendance is required Work statement is a non-managerial role, non-leadership role. As a Senior Software Engineer in Boeing's Secure Computing Solutions group, you will be part of the Pleasanton, California-based Integrated Product Te

Full-time

Senior Validation Engineer - ECU Cybersecurity (In-Vehicle Systems)

Newark, California

•

Today

Title: Senior Validation Engineer - ECU Cybersecurity (In-Vehicle Systems) Location: Newark, CA / Southfield, MI Duration: 12 Months (Possible Extension) Onsite: 5 Days/Week We are currently seeking a Senior Validation Engineer - ECU Cybersecurity to support the validation of in-vehicle security systems across next-generation electric vehicle platforms. This role requires an experienced professional with a strong background in automotive ECU validation, embedded security testing, and vehicle-l

Full-time

Search all similar jobs