Security Tester

About Apexon

Apexon is a digital first technology services firm specializing in accelerating business transformation and delivering human centric digital experiences. We have been meeting customers wherever they are in the digital lifecycle and helping them outperform their competition through speed and innovation.

Apexon brings together distinct core competencies in AI, analytics, app development, cloud, commerce, CX, data, DevOps, IoT, mobile, quality engineering, and UX, along with deep expertise in BFSI, healthcare, and life sciences, helping businesses capitalize on the unlimited opportunities digital offers.

Our reputation is built on a comprehensive suite of engineering services, a dedication to solving clients' toughest technology problems, and a commitment to continuous improvement. Backed by Goldman Sachs Asset Management and Everstone Capital, Apexon has a global presence across four continents.

We enable #HumanFirstDIGITAL.

We are hiring for a Security Tester opportunity.

Role: Security Tester

Location: Remote

Position: 2

Work Arrangement: Remote

Role Overview

We are seeking experienced Security Testers with advanced expertise in manual penetration testing, Dynamic Application Security Testing (DAST), Static Application Security Testing (SAST), and secure code reviews. The ideal candidates will identify and validate application security vulnerabilities, assess risk and business impact, recommend practical remediation strategies, and collaborate with development teams to strengthen application security throughout the Software Development Life Cycle (SDLC).

Required Skills

• Advanced expertise in manual application penetration testing.
• Advanced experience with Dynamic Application Security Testing (DAST).
• Advanced experience with Static Application Security Testing (SAST).
• Advanced secure code review skills.
• Strong understanding of web application vulnerabilities, security weaknesses, and secure coding practices.
• Ability to validate vulnerabilities, reproduce findings, and eliminate false positives.
• Experience assessing security risks, determining business impact, and recommending remediation measures.
• Strong analytical, documentation, and communication skills.

Preferred Skills

• Certified Ethical Hacker (CEH) certification.
• Offensive Security Certified Professional (OSCP) certification.
• Relevant experience with industry standard application security testing tools and methodologies.

Key Responsibilities

• Perform manual and automated web application security assessments to identify security weaknesses and validate application resilience.
• Conduct DAST and SAST using industry standard security tools and methodologies.
• Perform secure code reviews across modern application frameworks to identify coding vulnerabilities and security gaps.
• Analyze, validate, reproduce, and document security vulnerabilities while eliminating false positives.
• Assess security findings, determine risk ratings and business impact, and provide actionable remediation recommendations.
• Prepare detailed security assessment reports with findings, proof of concept evidence, risk assessments, and corrective actions.
• Collaborate with development teams to review and validate remediation of identified vulnerabilities.
• Provide guidance on secure application architecture, design principles, and secure software development best practices.
• Support vulnerability management activities, including tracking, prioritization, and remediation of security issues.
• Work with developers, architects, and project stakeholders to integrate security throughout the SDLC.
• Participate in security reviews, threat assessments, and application risk evaluations to strengthen application security.
• Continuously improve application security processes, standards, and testing methodologies.

Expected Deliverables

• Comprehensive security testing reports documenting identified vulnerabilities, severity ratings, and business impact.
• Proof of concept evidence and reproducible steps for validated findings.
• Practical remediation recommendations and corrective action plans.
• Vulnerability validation and remediation verification results.

Education Requirement

Bachelor's degree in Computer Science, Information Technology, Engineering, Business Administration, or a related field is preferred.

Our Commitment to Diversity & Inclusion

Did you know that Apexon has been Certified by Great Place To Work, the global authority on workplace culture, in each of the four regions in which it operates: USA for the seventh time in 2026, India for the tenth consecutive time in 2026, the UK for the fourth time in 2026, and Mexico for the second time in 2026.

Apexon is committed to being an equal opportunity employer and promoting diversity in the workplace. We take affirmative action to ensure equal employment opportunity for all qualified individuals. Apexon strictly prohibits discrimination and harassment of any kind and provides equal employment opportunities to all qualified individuals without regard to gender, race, color, ethnicity or national origin, age, disability, religion, sexual orientation, gender identity or expression, veteran status, or any other applicable characteristics protected by law.

You can read about our Job Applicant Privacy policy here: Job Applicant Privacy Policy on apexon.com.

Our Commitment to Environment

Actively contribute to Apexon''s commitment to environmental responsibility by following sustainable practices and supporting ESG initiatives.

Our Perks and Benefits

Our benefits and rewards program has been thoughtfully designed to recognize your skills and contributions, elevate your learning experience, and provide care and support for you and your loved ones.

We also offer:

• Health Insurance with Dental & Vision
• 401K Plan
• Life Insurance, STD & LTD
• Paid Vacations & Holidays
• Continuous Skill Based Development and Career Advancement Opportunities

Job Location :

Richmond, Virginia, United States

Please Note: Apexon never asks candidates to make payments at any stage of the hiring process, including interviews, offer letters, training or background verification. If you receive suspicious recruitment communications or payment requests from individuals claiming to represent Apexon, do not make any payment and report the communication to cybersecurity@apexon.com.

All genuine openings are listed on our official Careers page.