Penetration Testing || USA-100% Remote

Penetration Testing || USA-100% Remote

Posted 1 day ago by 1754983496

Negotiable
Outside
Remote
USA

Summary: The role of Penetration Tester involves conducting manual penetration testing on various applications, including APIs, web, mobile, and thick client applications. The position requires strong communication skills to engage with both technical and non-technical audiences and provide insights on testing processes and remediation options. Candidates should have a minimum of three years of relevant experience and be capable of working independently on testing engagements. The role is fully remote and classified as outside IR35.

Key Responsibilities:

  • Perform manual Application penetration testing against API's (REST/SOAP), Web Applications, Mobile applications, and thick client applications
  • Perform threat modeling, evaluate application business logic, and perform application architecture reviews
  • Ability to demonstrate application testing experience in real time via demos to both internal and external audiences
  • Ability to perform objective based, abstract penetration testing engagements
  • Ability to develop and exploit POCs
  • Act independently in penetration testing engagements, with minimal oversight and guidance
  • Engage with technical and non-technical audiences to articulate both testing processes, techniques and results; guide technical audiences on remediation options and assist clients in weighing those options

Key Skills:

  • Minimum three (3) years of recent experience in application penetration testing of API's, web applications, or mobile applications
  • Ability to communicate reporting results with technical and non-technical audiences and lead remediation conversations
  • Experience with burp suite pro, and other app testing tools such as Netsparker
  • Bachelor's degree from an accredited college/university or equivalent industry experience
  • One or more major ethical hacking certifications not required but preferred; GWAPT, CREST, OSWE, OSWA

Salary (Rate): undetermined

City: undetermined

Country: USA

Working Arrangements: remote

IR35 Status: outside IR35

Seniority Level: undetermined

Industry: IT

Detailed Description From Employer:

Job Title: Penetration Testing
Job Location: USA -100% Remote
Job Type: Long Term Contract

Responsibilities:

Perform manual Application penetration testing against API's (REST/SOAP), Web Applications, Mobile applications, and thick client applications
Perform threat modeling, evaluate application business logic, and perform application architecture reviews
Ability to demonstrate application testing experience in real time via demos to both internal and external audiences
Ability to perform objective based, abstract penetration testing engagements
Ability to develop and exploit POCs
Act independently in penetration testing engagements, with minimal oversight and guidance
Engage with technical and non-technical audiences to articulate both testing processes, techniques and results; guide technical audiences on remediation options and assist clients in weighing those options

Qualifications:

Minimum three (3) years of recent experience in application penetration testing of API's, web applications, or mobile applications
Ability to communicate reporting results with technical and non-technical audiences and lead remediation conversations
Experience with burp suite pro, and other app testing tools such as Netsparker
Bachelor's degree from an accredited college/university or equivalent industry experience
One or more major ethical hacking certifications not required but preferred; GWAPT, CREST, OSWE, OSWA