Overview
Remote
$70 - $72
Contract - W2
Skills
API
Articulate
Burp Suite
Network Security
Offshoring
Penetration Testing
Quality Assurance
FOCUS
Grant Management
Marketing
Mentorship
Mobile Applications
Netsparker
Real-time
Reporting
SOAP
Security QA
Software Architecture
Testing
Threat Modeling
Web Applications
White Hat
Job Details
Req#: 5960-1
Job Title: Penetration Tester
Location: Remote
Duration: 6 Months+ (Possible FTE)
The Penetration Tester will own all security testing-related activities and responsibilities across the entire E&T solution portfolio with additional focus on the Grants Management practice. This position will contribute to overall organization objectives of delivering timely, bug-free, and secure releases for our solutions by enabling a shift-left mindset when it comes to application and network security.
- Perform manual application penetration testing against API s (REST/SOAP), Web Apps, Mobile apps, and thick client apps
- Perform threat modeling, evaluate application business logic, and perform application architecture reviews
- Engage with technical and non-technical audiences to articulate both testing processes, techniques and results; guide technical audiences on remediation options; and assist teams in weighing options
- Partner with the Cyber teams to develop new testing techniques, automation for testing and marketing collateral to support the practice and mentor junior and offshore team members on tools and techniques in performing tests
- Ability to exploit POCs and demonstrate application testing experience in real time via demos to internal audiences
- Minimum four (4) years of recent experience in application penetration testing of API s, web applications, or mobile applications
- Ability to communicate reporting results with technical and non-technical audiences and lead remediation conversations
- Experience with burp suite pro, and other app testing tools such as Netsparker and Checkmarx
- One or more major ethical hacking certifications not required but preferred; GWAPT, CREST, OSWE, OSWA
Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.