Application Security Penetration Tester

We are seeking an Application Security Penetration Tester with development experience to perform security assessments, vulnerability testing, and penetration tests for critical applications. The ideal candidate will have 4–6+ years of experience in security testing and software development and be proficient in modern programming languages and web technologies.

Key Competencies:

• Application security testing (Penetration testing, SAST, DAST, SCA, OWASP Top 10)

• Development experience in:

  • Python

  • Node.js

  • ReactJS

  • ASP.NET 4.5

• Strong understanding of internet architecture and web technologies

• Knowledge of relational databases (SQL Server, MySQL) and ability to write SQL queries

• Familiarity with pipeline integration and source code management tools (Jenkins, GitHub)

• Basic knowledge of Azure cloud services

Essential Skills & Technical Expertise:

• Skilled in security platforms: Checkmarx, AppScan, Fortify, Veracode, Burp Suite, etc.

• Experience with web services, JSON, and API testing

• Conduct vulnerability assessments and communicate security issues effectively

• Proficient in programming languages: .NET, C, C++, Java, Python

• Knowledge of OOP concepts and JavaScript frameworks (Node.js, React)

• 1–3 years of web development experience (HTML, ASP, ColdFusion, JSP, Node.js, React)

• Ability to verify vulnerabilities and perform manual testing

• Familiarity with automating security scans and integrating with CI/CD pipelines

Role Responsibilities:

• Schedule and perform regular application tests and penetration tests

• Test changes before deployment to production

• Analyze and validate security vulnerabilities

• Track and report testing activities; maintain dashboards for vulnerabilities

• Present findings to stakeholders and recommend mitigations

• Improve asset management processes and enhance threat modeling

• Review source code for potential security issues and duplicates

• Collaborate with developers to improve security practices

• Support incident response and security investigations

• Conduct various security tests including penetration testing, purple team, and red team exercises

• Company Benefits & Culture

• Inclusive and diverse work environment
• Opportunities for professional growth and development
• Comprehensive health and wellness benefits