<h3>Job Description</h3>
Job DescriptionDescription:
 
Position Summary 
The Senior Web Application Penetration Tester performs security assessments of web applications, APIs, mobile applications, and cloud-hosted platforms. This role focuses on identifying application-layer vulnerabilities and validating exploitability. One week engagement. 
 
Key Responsibilities
<ul>
<li>Conduct OWASP Top 10 assessments. </li>
<li>Perform authenticated and unauthenticated testing. </li>
<li>Assess REST, SOAP, GraphQL, and microservice APIs. </li>
<li>Conduct source code reviews when required. </li>
<li>Validate remediation efforts. </li>
<li>Develop detailed technical findings and risk ratings. </li>
<li>Support security architecture reviews. </li>
</ul>
 Requirements:

Required Qualifications
<ul>
<li>Minimum 5 years of application security testing experience. </li>
<li>Experience testing:
<ul>
<li>Web applications </li>
<li>APIs </li>
<li>Mobile applications </li>
<li>Cloud-native environments </li>
</ul>
</li>
<li>Knowledge of:
<ul>
<li>OWASP ASVS </li>
<li>OWASP Top 10 </li>
<li>Secure SDLC </li>
</ul>
</li>
<li>Certification preferred:
<ul>
<li>OSCP </li>
<li>eWPT </li>
<li>CEH </li>
<li>GWAPT </li>
<li>CREST CRT </li>
</ul>
</li>
</ul>
Nice-to-Have
<ul>
<li>Secure coding experience. </li>
<li>Experience with SAST/DAST tools. </li>
<li>FedRAMP assessment experience.</li>
</ul>

Web Application Tester

Job Description