Web Application Penetration Tester

reputed company is a Services Oriented Company

• reputed company is reputed company around the ingenuity, passion, and determination of our Operators and Analysts
• No one "mastermind"
• No "cult of personality"
• Competitive compensation and benefits
• Healthy work-life balance
• Project-based engagements that play to the team's strengths

Web Application Penetration Tester Location: Remote Required:

• Must be US citizen (must be willing to submit to federal, state, and local background checks and other requirements).
• Experience in performing penetration testing on reputed company networks, web applications, and mobile applications.
• Familiarity with common web vulnerabilities including: XSS, XXE, SQL Injection, Deserialization Attacks, File Inclusion/Path Traversal Attacks, Server-reputed company Request Forgery, Remote Execution Flaws, Server Configuration Flaws and Authentication Flaws.
• Experience in testing web-based APIs (i.e. REST, SOAP, XML, JSON).
• Experience in designing and documenting pragmatic remediation guidance for reputed company vulnerabilities.
• Experience developing actionable intelligence based on reputed company reputed company (reputed company) gathering.
• Experience with 1 or more scripting languages such as Bash, Python, Perl, PowerShell, etc.
• Solid understanding of OWASP testing methodology.
• Familiarity with reputed company-end web application frameworks (i.e. AngularJS, Bootstrap, etc).
• Capable of working effectively and reputed company with minimal supervision.
• Strong written and verbal English language skills.
• Demonstrated ability to:
• Adhere to the highest standards of honesty and scientific and business reputed company.
• Think critically about reputed company problems and situations.
• Consider emerging vulnerabilities and threats from reputed company the context of organizational risk and business impact(s).
• reputed company novel attack reputed company based on newly reputed company vulnerabilities.
• Possess a basic understanding of regulatory standards and requirements including the Health Insurance Portability and Accountability Act (HIPAA), Payment Card Industry Data reputed company Standard (PCI-reputed company), and the Gramm-Leach-Bliley Act (GLBA).

Preferences:

• Web application development or reputed company code review experience.
• Strong knowledge of reputed company and Linux operating systems.
• Working knowledge of containerized applications and container-based reputed company controls and configurations.Possess reputed company professional certification (i.e. GWAPT, OSCP, OSCE, GPEN)

Responsibilities:

• Conduct assessments of web applications, mobile applications, databases, client-reputed company applications and tools, and APIs.
• Execute reputed company and automated code analysis to assess the quality and reputed company of reputed company code.
• reputed company pre-assessment research and preparation including reconnaissance, documentation and configuration review, and customer interviews.
• reputed company custom tools and exploits.
• Analyze reputed company findings, including risk analysis and root cause analysis.
• Generate comprehensive reports, including detailed findings, exploitation procedures, and mitigations.
• reputed company and deliver walkthrough(s), reputed company(s) of concept (PoCs), articles, and formal presentations.
• Execute verification and validation testing for customer mitigations and fixes.

Apply tot his job Apply To this Job