Lead Application Penetration Tester- 4 days onsite Washington D.C. - Motion Recruitment Partners, LLC - Arlington, VA, US | Dice.com

Motion Recruitment Partners, LLC

Apply Now

Lead Application Penetration Tester- 4 days onsite Washington D.C.

Arlington, VA, US • Posted 30+ days ago • Updated 8 hours ago

Full Time

On-site

160k - 180k

Apply Now

Motion Recruitment Partners, LLC

Fitment

Dice Job Match Score™

To see how well you match this job, please log in or create an account.

Once logged in, be sure to complete your profile to get the most accurate match score.

Fitment

Dice Job Match Score™

🧠 Analyzing your skills...

Job Details

Skills

Cloud Computing
Microservices
Vulnerability Scanning
Emulation
Continuous Integration
Continuous Delivery
Security Controls
Presentations
Threat Analysis
Research
Knowledge Sharing
Penetration Testing
Code Review
Network
System Security
Mentorship
Testing
Mobile Applications
Programming Languages
Python
Perl
Ruby
Bash
C
C++
C#
JavaScript
Java
Security QA
SCA
Coverity
Fortify
OWASP
Netsparker
Burp Suite
SAP BASIS

Summary

Lead Application Penetration Tester

As the Lead Security Engineer, you'll serve as both a technical expert and team leader, guiding a group of security testers through comprehensive assessments of a cloud-native, microservices-based environment.

The company is located in Washington D.C. and will be 4 days onsite a week.

What You Will Be Doing:

Lead and mentor a team of security testers, ensuring consistent delivery of high-quality security assessments.
Conduct comprehensive technical testing of web and mobile applications, including source code analysis, penetration testing, vulnerability scanning, adversary emulation, and validation of security controls.
Perform detailed source code reviews and provide expert consulting on identified security findings.
Implement and maintain both static and dynamic security testing methodologies.
Integrate automated security testing and monitoring into CI/CD pipelines to enhance continuous assurance.
Validate security controls across web resources, mobile applications, and associated backend services.
Document, prioritize, and communicate findings and remediation recommendations to key stakeholders.
Create clear, detailed reports and presentations tailored for technical and non-technical audiences.
Apply adversarial tradecraft and cyber threat intelligence to design, emulate, and execute realistic assessments.
Conduct innovative research and foster a culture of continuous learning and knowledge sharing.
Design new penetration assessments based on prior findings and evolving client environments.
Develop or adapt custom tools and processes to address identified needs and improve program effectiveness.

Required Skills & Experience:

5+ years of experience in application penetration testing, source code review, or related areas (or 5+ years designing web/mobile apps with at least 3 years in security testing, red teaming, or purple teaming).
Strong foundation in application, network, and system security principles.
Proven experience leading security assessments and mentoring technical teams.
Expertise in static code analysis and testing of web and mobile applications.
Proficiency in multiple programming languages such as Python, Perl, Ruby, Bash, C/C++, C#, JavaScript, and Java.
Hands-on experience with security testing tools like Burp Suite Pro and its relevant plugins/extensions.
Familiarity with DAST/SAST/SCA tools such as Black Duck, Coverity, Datadog, Checkmarx, Fortify, OWASP ZAP, Acunetix, Netsparker, Veracode, PlexTrac, and Burp Suite.

Applicants must be currently authorized to work in the United States on a full-time basis now and in the future.
This position doesn't provide sponsorship.

Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.

Dice Id: 10105282
Position Id: 796538
Posted 30+ days ago

Company Info

About Motion Recruitment Partners, LLC

Motion Recruitment delivers IT Talent Solutions for Contract, Direct Hire, Managed Solutions and Statement of Work to all of North America from our 21 delivery centers. Our high-touch, specialized, team-based recruitment model’s success is proven through our exemplary track record in filling the most challenging IT positions for startup and enterprise clients alike. Our hyper-specialized tech focus results in a truly consultative approach for both our clients and candidates, within our recruiting areas of expertise: Software, Mobile, Data, Infrastructure, Cybersecurity, Product + UX and Functional.

Motion also delivers IT Consulting Solutions through the Motion Consulting Group (MCG) that create true digital transformation for IT projects in Agile Development & Coaching, DevOps & DevSecOps Solutions, and Managed Services for IT Operations.

We’re also the proud creators of Tech in Motion and the Timmy Awards, our North American community platform, events series and award program that connects over 250,000 tech enthusiasts to meet, learn, and innovate.

Go to company profile

Create job alert

Never miss an opportunity! Create an alert based on the job you applied for.

Similar Jobs

Lead Web App Pen Tester

Arlington, Virginia

•

Today

Lead Web App Pen Tester Job Description Overview CoStar Group (NASDAQ: CSGP) is a leading global provider of commercial and residential real estate information, analytics, and online marketplaces. Included in the S&P 500 Index and the NASDAQ 100, CoStar Group is on a mission to digitize the world's real estate, empowering all people to discover properties, insights and connections that improve their businesses and lives. We have been living and breathing the world of real estate information an

Full-time

Industrial Cybersecurity Analyst - 1898 & Co. (Washington DC)

Washington, District of Columbia

•

Today

Description The Industrial Cybersecurity Analyst will assist with projects addressing Information Technology (IT) and Industrial Control System security. The 1898 & Co. Security & Risk Consulting practice is a premier OT/ICS/SCADA cybersecurity consulting practice whose mission is to serve humanity by improving the safety, security, and reliability of the world's critical infrastructure - improving risk management through resiliency, situational awareness, and preparedness. The Industrial Cybers

Full-time

Information Systems Security Manager (ISSM)

Lorton, Virginia

•

Today

The National Security Sector at Leidos is looking for an Information Systems Security Manager (ISSM) to support a fast-paced program with the Air Force Life Cycle Management Center. This role involves supporting the delivery of comprehensive IT and support services to ensure mission success while adhering to DoD standards and regulations. The ISSM will oversee the cybersecurity posture of DoD information systems, ensuring compliance with DoD security standards and protecting sensitive data. The

Full-time

USD 104,650.00 - 189,175.00 per year

Security Control Assessor

Arlington, Virginia

•

Today

Job#: 3013125 Job Description: Title: Security Control Assessor Location: Arlington, VA 22209 Type: Long-term contract new award 5+ years Pay: $60-67/hr Overview We are seeking a highly experienced Security Control Assessor (SCA) to provide expert-level cybersecurity assessment, compliance, and risk management support across the DoD SAP IT enterprise. This role is critical in guiding programs through the Risk Management Framework (RMF), validating security controls, and ensuring enterprise-w

Easy Apply

Full-time

USD 60.00 - 67.00 per hour