Application Tester - DAST/SAST - Only W2

Required Skills

• Extensive experience with Dynamic Application Security Testing (DAST) and Static Application Security Testing (SAST).
• Strong hands-on expertise in manual penetration testing and secure source code analysis.

Preferred Skills

• CEH or OSCP certification is desirable but not mandatory.

Responsibilities

• Execute manual and automated security testing of web applications to identify potential vulnerabilities.
• Perform DAST, SAST, penetration testing, and source code security assessments.
• Reproduce and verify identified vulnerabilities, document evidence, and filter out false-positive results.
• Evaluate security risks and business impact, providing actionable recommendations to address vulnerabilities.
• Develop comprehensive security reports covering findings, proof-of-concept evidence, risk levels, and remediation steps.
• Work closely with development teams to review security fixes and confirm successful remediation.
• Recommend secure application architecture, design practices, and coding standards.
• Track vulnerabilities, prioritize remediation efforts, and monitor resolution progress.
• Embed security testing and controls across all phases of the Software Development Life Cycle (SDLC).
• Contribute to threat modeling, application security reviews, and risk assessments.
• Enhance security testing frameworks, assessment procedures, and application security standards.

“Taras Technology, LLC is an EEO/AA Employer: women, minorities, the disabled and veterans are encouraged to apply”