The Senior Web Application Penetration Tester performs security assessments of web applications, APIs, mobile applications, and cloud-hosted platforms. This role focuses on identifying application-layer vulnerabilities and validating exploitability. One week engagement.

• Conduct OWASP Top 10 assessments.
• Perform authenticated and unauthenticated testing.
• Assess REST, SOAP, GraphQL, and microservice APIs.
• Conduct source code reviews when required.
• Validate remediation efforts.
• Develop detailed technical findings and risk ratings.
• Support security architecture reviews.

• Minimum 5 years of application security testing experience.
• Experience testing:
  • Web applications
  • APIs
  • Mobile applications
  • Cloud-native environments
• Knowledge of:
  • OWASP ASVS
  • OWASP Top 10
  • Secure SDLC
• Certification preferred:
  • OSCP
  • eWPT
  • CEH
  • GWAPT
  • CREST CRT

• Secure coding experience.
• Experience with SAST/DAST tools.
• FedRAMP assessment experience.