Overview
Hybrid
$65 - $75
Contract - Independent
Contract - W2
Contract - 6 Month(s)
No Travel Required
Skills
MITRE
Application security
Owasp Zap
manual securities testing
Owasp Top 10
Offensive Securities testing APIs
Burp suite
Job Details
Application Offensive Security Consultant – Hybrid – Contract-to-Hire
A large financial services organization is seeking an Application Offensive Security Consultant for a hybrid, contract-to-hire position. This role supports the organization’s Technology Risk initiative by delivering offensive security assessments and guiding secure development across key projects.
A large financial services organization is seeking an Application Offensive Security Consultant for a hybrid, contract-to-hire position. This role supports the organization’s Technology Risk initiative by delivering offensive security assessments and guiding secure development across key projects.
oin our Application Security team as part of our broader Technology Risk initiative. As an Application Offensive Security Consultant, you ll lead offensive security assessments, perform hands-on testing of applications and APIs, and provide expert guidance on key projects. Your goal: identify vulnerabilities before attackers do, and help build more secure software across the enterprise.
Key Responsibilities
- Conduct offensive security testing on applications, APIs, and services.
- Perform targeted threat hunting to identify potential risks in application environments.
- Execute manual penetration testing beyond standard automated scans.
- Document and communicate vulnerabilities using a defined reporting format.
- Summarize assessment findings and support remediation efforts.
- Provide subject matter expertise on secure application design and defensive techniques.
- Collaborate with Security Architects, Product Managers, and Risk teams to ensure secure delivery across products.
What You ll Bring
- 6+ years of experience testing web applications for security vulnerabilities.
- 4+ years of hands-on experience with tools such as Burp Suite, OWASP ZAP, or similar.
- Strong manual testing skills and the ability to identify OWASP Top 10 issues without relying on scanners.
- Familiarity with adversarial methodologies and the MITRE ATT&CK Framework.
- A Bachelor s degree or equivalent experience.
- Strong communication skills and the ability to work across multiple teams and priorities.
Bonus Skills (Nice to Have)
- Exposure to penetration testing or red teaming methodologies.
- Participation in Capture The Flag (CTF) events or hands-on training platforms like TryHackMe or HackTheBox.
- Experience completing advanced security courses or labs.
- Interest in continuous learning and staying current on security trends.
Note: Certifications (e.g., OSCP, OSWE, GPEN) are appreciated but not required.
Why Join Us?
You'll work in a collaborative, security-focused environment where your skills directly impact the safety and integrity of critical applications. If you're passionate about offensive security and enjoy digging deep into real-world risks, we d love to hear from you. This is a contract to hire position.
Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.