Senior Penetration Tester

Job Summary

To support an Agency-level Cybersecurity program, the full-time Senior Penetration Tester will conduct web application and API database penetration testing, analyze security weaknesses, and coordinate with stakeholders, all while working remotely.

Key responsibilities

• Conduct web application and API database penetration testing efforts
• Analyze application workflows and security mechanisms to identify vulnerabilities
• Draft and review technical analysis reports resulting from penetration testing

Required qualifications

• Bachelor's degree and 4-5 years of relevant experience, or equivalent work experience
• Minimum of 3 years of experience in penetration testing and vulnerability management
• Familiarity with API testing methodologies and OWASP Top 10
• Experience with tools such as Kali Linux, Metasploit, and Burp Suite
• Understanding of NIST and FISMA compliance standards