Penetration Tester (Application/Security)

Overview

On Site
Contract - W2

Skills

Software security
Financial services
Security QA
Quality assurance
Penetration testing
Security engineering
Burp suite
Customer service
Training and development
Jersey
C
Reporting
Testing
Collaboration
OWASP
SANS
OSCP
MEAN stack
SAP BASIS
Policies

Job Details

Software Guidance & Assistance, Inc., (SGA), is searching for a Penetration Tester (Application/Security) for a 6 MONTH CONTRACT-TO-PERM assignment with one of our premier Financial Services clients in Jersey City, NJ . Hybrid work is required. This is NOT fully remote.

This is a true right to hire position - client cannot sponsor Visas now or in the future
Cannot work with additional layers of employment (no c2c)
Looking for someone to perform red-teaming and manual security testing!


Responsibilities :
  • Perform Offensive Application Testing against applications and APIs.
  • Perform manual penetration testing and threat hunting against applications.
  • Provide the vulnerability information in the predefined report format after performing the testing using manual methodology and tools.
  • Generate reports on assessment findings and summarizes to facilitate remediation, document technical issues identified during security assessments.
  • Be a subject matter expert and respond to any security engineering questions/ requests related to Application Defense enhancements.
  • Collaborate with Security Architects, Product Manager, Risk Managers, and other teams to deliver high quality product.
Required Skills:
  • Minimum of 6 years of related experience.
  • Bachelor's Degree and/or equivalent experience.
  • Minimum of 6 years of experience in application penetration testing.
  • Minimum of 4 years of experience in App PenTest tools such as Burp Suite, Owasp Zap.
  • Ability to explain vulnerabilities and weaknesses in OWASP Top 10 and SANS Top 25 to any audience and discuss effective defensive techniques.
  • Understanding of MITRE Framework and adversarial methodologies.
  • Certified in OSCP or GWAPT or related offensive security/red teaming certification.
SGA is a technology and resource solutions provider driven to stand out. We are a women-owned business. Our mission: to solve big IT problems with a more personal, boutique approach. Each year, we match consultants like you to more than 1,000 engagements. When we say let's work better together, we mean it. You'll join a diverse team built on these core values: customer service, employee development, and quality and integrity in everything we do. Be yourself, love what you do and find your passion at work. Please find us at .

SGA is an Equal Opportunity Employer and does not discriminate on the basis of Race, Color, Sex, Sexual Orientation, Gender Identity, Religion, National Origin, Disability, Veteran Status, Age, Marital Status, Pregnancy, Genetic Information, or Other Legally Protected Status. We are committed to providing access, equal opportunity, and reasonable accommodation for individuals with disabilities in employment, and our services, programs, and activities. Please visit our company to request an accommodation or assistance regarding our policy.