Web Application Penetration Tester

Job Summary

Seeking a full-time Web Application Penetration Tester who will perform hands-on penetration tests on real customer applications, identify coverage gaps in automated testing, and collaborate with software engineers to enhance product security, all in a remote work environment.

Key responsibilities

• Conduct full-scope web application penetration tests to identify vulnerabilities and attack paths
• Review and validate NodeZero results, manually reproducing edge cases and building proof-of-concept exploits
• Collaborate with engineering teams to translate findings into product improvements and maintain a library of test cases

Required qualifications

• Extensive hands-on experience with web application penetration testing
• Deep knowledge of web vulnerability classes, including SQL injection, XSS, and business-logic flaws
• Proficiency with proxy tools like Burp Suite and scripting for proof-of-concept exploits
• Strong technical documentation and communication skills for diverse audiences
• History of recognized security research and successful bug bounty contributions