Search Jobs | Dice.com

4 results (1 new)

Group by company

Application Security and Penetration Testing Engineer

DTEL Engineering & Consultants Inc

Parsippany-Troy Hills, New Jersey • Today

Easy Apply

Contract

Depends on Experience

Cybersecurity / AI Security (Penetration Platform) Engineer

Codeforce 360

Hybrid in New York, New York • 8d ago

Easy Apply

Contract, Third Party

$60 - $68

Ethical Hacker/Penetration Tester Principal

VGAI Solutions Inc

Remote • Yesterday

Easy Apply

Contract

55 - 60

Lead Penetration Test Engineer

S&P Consultants

Remote or New Jersey • Today

Full-time

USD 135,000.00 per year

Job Details

Skills

Penetration Testing

Summary

Position Summary

We are seeking an experienced Application Security and Penetration Testing Engineer to strengthen the security of our enterprise web applications, APIs, and supporting services. This role will perform automated and manual security assessments, validate vulnerabilities, evaluate business risk, and collaborate with development teams to implement and verify remediation.

The ideal candidate will combine hands-on penetration testing expertise with a strong understanding of application architecture, secure software development, and healthcare data security requirements.

Key Responsibilities

Conduct security assessments of web applications, APIs, and related services using automated vulnerability-scanning and DAST tools.
Perform manual penetration testing to identify vulnerabilities that automated tools may not detect.
Test authentication, authorization, session management, access controls, input validation, file handling, APIs, and application business logic.
Identify issues such as broken access control, injection vulnerabilities, cross-site scripting, insecure configurations, information exposure, and privilege escalation.
Validate automated scan findings, eliminate false positives, and determine the exploitability and business impact of confirmed vulnerabilities.
Document findings with clear technical evidence, reproduction steps, severity, risk, business impact, and remediation recommendations.
Work with development and architecture teams to review findings and recommend practical corrective actions.
Retest remediated vulnerabilities and formally confirm their closure.
Support secure design reviews, threat modeling, code reviews, and release-readiness assessments.
Help integrate application security testing into the software development lifecycle and CI/CD pipelines.
Maintain vulnerability status, remediation timelines, risk exceptions, and security assessment reports.
Support internal audits, customer security reviews, and external penetration-testing activities.
Provide application security guidance and knowledge-sharing sessions for development and QA teams.
Stay current with emerging vulnerabilities, attack techniques, security tools, and application security best practices.

Required Qualifications

Bachelor s degree in Computer Science, Cybersecurity, Information Technology, or a related discipline, or equivalent professional experience.
Five or more years of information security experience, including at least three years of hands-on web application and API penetration testing.
Strong knowledge of the OWASP Top 10, OWASP API Security Top 10, CWE, CVSS, and common application attack techniques.
Hands-on experience with tools such as Burp Suite Professional, OWASP ZAP, Invicti, or comparable DAST and penetration-testing platforms.
Experience in manually testing authentication, authorization, session management, role-based access, APIs, and business-logic controls.
Ability to validate findings independently and distinguish exploitable vulnerabilities from false positives.
Understanding of HTTP/HTTPS, REST APIs, cookies, tokens, browser security controls, and web application architecture.
Familiarity with secure coding practices and application security considerations for .NET and JavaScript-based applications.
Ability to communicate technical vulnerabilities, business impact, and remediation guidance to both technical and leadership audiences.
Strong analytical, documentation, collaboration, and problem-solving skills.

Preferred Qualifications

Experience securing healthcare applications or other systems that handle sensitive or regulated information.
Knowledge of HIPAA, HITECH, HITRUST, SOC 2, NIST, and related security frameworks.
Experience with SAST, software composition analysis, dependency scanning, secrets scanning, and SonarQube.
Experience integrating security testing into Azure DevOps, GitHub, or similar CI/CD platforms.
Familiarity with threat modeling, secure architecture reviews, and source-code security reviews.
Experience testing single sign-on, OAuth 2.0, OpenID Connect, JWT, and other identity protocols.
Relevant certifications such as OSCP, OSWE, GWAPT, GPEN, CEH, or CISSP.

Success Measures

Earlier identification of application and API security risks.
Accurate findings with minimal false positives.
Clear, actionable remediation guidance for development teams.
Timely validation and closure of identified vulnerabilities.
Improved application security coverage throughout the development lifecycle.
Reduced dependence on periodic external penetration testing.

Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.

Dice Id: 91102852
Position Id: 9119597
Posted 5 hours ago

Fitment

Dice Job Match Score™

To see how well you match this job, please log in or create an account.

Once logged in, be sure to complete your profile to get the most accurate match score.

Contact the job poster

Ramana Channamsetty

Recruiter @ DTEL Engineering & Consultants Inc

View Profile

Create job alert

Never miss an opportunity! Create an alert based on the job you applied for.

Similar Jobs

Application Security Engineer

New York, New York

•

Today

Job Description The Office of Technology and Innovation (OTI) leverages technology to drive opportunity, improve public safety, and help government run better across New York City. From delivering affordable broadband to protecting against cybersecurity threats and building digital government services, OTI is at the forefront of how the city delivers for New Yorkers in the 21st century. Follow us on social media @NYCOfficeofTech, and visit to learn more. At OTI, we offer great benefits, and th

Full-time

Application Security Tester || Berkeley Heights, NJ || Contract Role

Berkeley Heights, New Jersey

•

19d ago

Application Security Tester Berkeley Heights, NJ Contract Role Job Summary: We are seeking a dedicated and detail-oriented Application Security Tester to join our team as a Process Lead. In this role, you will be responsible for ensuring the security of applications through rigorous testing and analysis. You will work closely with development and operations teams to integrate security practices into the software development lifecycle, with a strong emphasis on DevOps methodologies. Your expe

Easy Apply

Contract

Depends on Experience

Red Team / Offensive Security Analyst

Hybrid in New York, New York

•

4d ago

Responsible for simulating cyberattacks on systems, networks, and applications to identify vulnerabilities before malicious actors can exploit them. 1. Security Testing & Assessments * Conduct penetration testing on: o Web applications o Network and infrastructure o Desktops/Servers Linux and Windows o APIs, cloud environments, and mobile apps * Perform vulnerability assessments using automated tools and manual techniques * Simulate real-world cyberattacks to evaluate system resilience 2. 2.

Easy Apply

Contract

Depends on Experience

Network Penetration Tester

Jersey City, New Jersey

•

Today

Position Summary The organization is seeking a Senior Associate in Network Penetration Testing to join their Offensive Cyber Operations team. This role involves conducting advanced security assessments, including both automated and manual testing, across various technologies and systems. The senior assessor will participate in the planning, execution, and reporting of security tests designed to simulate real-world adversaries. The position requires collaboration with a diverse team of security

Easy Apply

Contract

Job Details

Skills

Penetration Testing

Summary

Position Summary

Key Responsibilities

Conduct security assessments of web applications, APIs, and related services using automated vulnerability-scanning and DAST tools.
Perform manual penetration testing to identify vulnerabilities that automated tools may not detect.
Test authentication, authorization, session management, access controls, input validation, file handling, APIs, and application business logic.
Identify issues such as broken access control, injection vulnerabilities, cross-site scripting, insecure configurations, information exposure, and privilege escalation.
Validate automated scan findings, eliminate false positives, and determine the exploitability and business impact of confirmed vulnerabilities.
Document findings with clear technical evidence, reproduction steps, severity, risk, business impact, and remediation recommendations.
Work with development and architecture teams to review findings and recommend practical corrective actions.
Retest remediated vulnerabilities and formally confirm their closure.
Support secure design reviews, threat modeling, code reviews, and release-readiness assessments.
Help integrate application security testing into the software development lifecycle and CI/CD pipelines.
Maintain vulnerability status, remediation timelines, risk exceptions, and security assessment reports.
Support internal audits, customer security reviews, and external penetration-testing activities.
Provide application security guidance and knowledge-sharing sessions for development and QA teams.
Stay current with emerging vulnerabilities, attack techniques, security tools, and application security best practices.

Required Qualifications

Bachelor s degree in Computer Science, Cybersecurity, Information Technology, or a related discipline, or equivalent professional experience.
Five or more years of information security experience, including at least three years of hands-on web application and API penetration testing.
Strong knowledge of the OWASP Top 10, OWASP API Security Top 10, CWE, CVSS, and common application attack techniques.
Hands-on experience with tools such as Burp Suite Professional, OWASP ZAP, Invicti, or comparable DAST and penetration-testing platforms.
Experience in manually testing authentication, authorization, session management, role-based access, APIs, and business-logic controls.
Ability to validate findings independently and distinguish exploitable vulnerabilities from false positives.
Understanding of HTTP/HTTPS, REST APIs, cookies, tokens, browser security controls, and web application architecture.
Familiarity with secure coding practices and application security considerations for .NET and JavaScript-based applications.
Ability to communicate technical vulnerabilities, business impact, and remediation guidance to both technical and leadership audiences.
Strong analytical, documentation, collaboration, and problem-solving skills.

Preferred Qualifications

Experience securing healthcare applications or other systems that handle sensitive or regulated information.
Knowledge of HIPAA, HITECH, HITRUST, SOC 2, NIST, and related security frameworks.
Experience with SAST, software composition analysis, dependency scanning, secrets scanning, and SonarQube.
Experience integrating security testing into Azure DevOps, GitHub, or similar CI/CD platforms.
Familiarity with threat modeling, secure architecture reviews, and source-code security reviews.
Experience testing single sign-on, OAuth 2.0, OpenID Connect, JWT, and other identity protocols.
Relevant certifications such as OSCP, OSWE, GWAPT, GPEN, CEH, or CISSP.

Success Measures