Manual Penetration Tester - MPT 26-01503

Job Title: Manual Penetration Tester (Web & API Security)

Location: Remote
Employment Type: Contract

Key Responsibilities

• Perform manual application penetration testing on:

  • Web Applications

  • APIs (REST & SOAP)

  • Mobile Applications

  • Thick Client Applications

• Conduct threat modeling, business logic testing, and application architecture reviews

• Perform objective-based and abstract penetration testing engagements

• Develop and exploit Proof-of-Concept (POC) attacks

• Demonstrate application security testing methodologies in real-time (internal/external audiences)

• Work independently on engagements with minimal supervision

• Clearly communicate findings, risk levels, and remediation guidance to both technical and non-technical stakeholders

• Lead remediation discussions and support clients in evaluating security solutions

Required Qualifications

• Minimum 5+ years of recent hands-on experience in:

  • Web application penetration testing

  • API security testing

  • Mobile application security testing

• Strong experience with manual testing techniques and business logic vulnerability discovery

• Proficiency with tools such as:

  • Burp Suite Pro

  • Netsparker

  • Other industry-standard application security testing tools

• Excellent written and verbal communication skills

• Bachelor s degree in Computer Science, Cybersecurity, or equivalent industry experience

Preferred Certifications (Not Required)

• GWAPT

• CREST

• OSWE

• OSWA