Application Penetration Tester

📋 Description

• Collaborate with development teams and stakeholders to identify, define, and translate security
• Establish, maintain, and promote application security best practices, ensuring alignment with
• Assess the security of third-party libraries, software components, and dependencies to identify
• Conduct manual and automated secure code reviews of Java and Scala applications, identifying
• Analyze and interpret findings from Static Application Security Testing (SAST), Dynamic Application
• Perform static, dynamic, and manual penetration testing of web applications and REST APIs

🎯 Requirements

• At least 3 years of professional experience in secure code review, particularly with Java, Scala
• At least 3 years of practical experience with Static Application Security Testing (SAST) and
• 3+ years of hands-on experience conducting manual penetration testing of web applications and REST
• Strong understanding of secure coding practices, application security principles, and DevSecOps
• In-depth knowledge of the OWASP Top 10 and SANS Top 25, including their associated security risks
• Familiarity with CI/CD processes, AWS security principles, Jenkins, and GitHub.

🎁 Benefits

• Annual salary: $109,600–$137,000.
• Full-time, fully remote work arrangement within the United States.
• Opportunity to contribute to application security initiatives within a federal healthcare program.
• Hands-on experience with industry-standard penetration testing tools, security frameworks, and
• Opportunity to collaborate with development, security, and technical stakeholders on meaningful
• Exposure to enterprise application security, vulnerability management, and automated security