Penetration Tester - W2

Overview

Remote
Depends on Experience
Contract - Independent
Contract - W2
Contract - 1 Year(s)
No Travel Required

Skills

WebAPI
Web
Mobile Application Security Testing
burp suite pro
Netsparker
GWAPT
CREST
OSWE
OSWA

Job Details

Role: Penetration Tester with WebAPI and Mobile Application Security Testing
Location: 100% Remote
Duration: Long Term
Experience: 6 Years

Note:

We are seeking an experienced Penetration Tester with strong expertise in WebAPI, Web, and Mobile Application Security Testing. The ideal candidate will be highly skilled in manual penetration testing, threat modelling, and application architecture reviews, with the ability to communicate findings effectively to both technical and non-technical stakeholders.

Responsibilities:

Perform manual Application penetration testing against API s (REST/SOAP), Web Applications, Mobile applications, and thick client applications

Perform threat modelling, evaluate application business logic, and perform application architecture reviews

Ability to demonstrate application testing experience in real time via demos to both internal and external audiences

Ability to perform objective based, abstract penetration testing engagements

Ability to develop and exploit POCs

Act independently in penetration testing engagements, with minimal oversight and guidance

Engage with technical and non-technical audiences to articulate both testing processes, techniques and results; guide technical audiences on remediation options and assist clients in weighing those options

Qualifications:

Minimum three (3) years of recent experience in application penetration testing of API s, web applications, or mobile applications

Ability to communicate reporting results with technical and non-technical audiences and lead remediation conversations

Experience with burp suite pro, and other app testing tools such as Netsparker

Bachelor's degree from an accredited college/university or equivalent industry experience

One or more major ethical hacking certifications not required but preferred; GWAPT, CREST, OSWE, OSWA

Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.