Application Security Penetration Tester – Hybrid – Contract-to-Hire A large financial services organization is seeking an Application Security Penetration Tester for a hybrid, contract-to-hire position. This role supports the organization’s Technology Risk initiative by delivering offensive security assessments and guiding secure development across key projects. Join our Application Security team as part of our broader Technology Risk initiative. As an Application Security Penetration Tester, you’ll lead offensive security assessments, perform hands-on testing of applications and APIs, and provide expert guidance on key projects. Your goal: identify vulnerabilities before attackers do, and help build more secure software across the enterprise. Key Responsibilities Conduct offensive security testing on applications, APIs, and services. Perform targeted threat hunting to identify potential risks in application environments. Execute manual penetration testing beyond standard automated scans. Document and communicate vulnerabilities using a defined reporting format. Summarize assessment findings and support remediation efforts. Provide subject matter expertise on secure application design and defensive techniques. Collaborate with Security Architects, Product Managers, and Risk teams to ensure secure delivery across products. What You’ll Bring 6+ years of experience testing web applications for security vulnerabilities. 4+ years of hands-on experience with tools such as Burp Suite , OWASP ZAP , or similar. Strong manual testing skills and the ability to identify OWASP Top 10 issues without relying on scanners. Familiarity with adversarial methodologies and the MITRE ATT&CK Framework . A Bachelor’s degree or equivalent experience. Strong communication skills and the ability to work across multiple teams and priorities. Bonus Skills (Nice to Have) Exposure to penetration testing or red teaming methodologies. Participation in Capture The Flag (CTF) events or hands-on training platforms like TryHackMe or HackTheBox . Experience completing advanced security courses or labs. Interest in continuous learning and staying current on security trends. Note: Certifications (e.g., OSCP, OSWE, GPEN) are appreciated but not required . Why Join Us? You'll work in a collaborative, security-focused environment where your skills directly impact the safety and integrity of critical applications. If you're passionate about offensive security and enjoy digging deep into real-world risks, we’d love to hear from you. Flexible work from home options available. #J-18808-Ljbffr Synergistic Systems Inc
...clinical outcomes through its cutting-edge technology and services. The company is part of the broader Agfa-Gevaert Group, which... ...technology across various industries.We are looking for a Field Service Engineer to join our team. You will be responsible for properly...
...Allied Universal, North Americas leading security and facility services company, provides rewarding careers that give you a sense of purpose... ..., perks, and more for most full-time positions! As a Unarmed Security Officer - Front Desk in Savannah, GA , you will serve...
We are assisting a well-established, private, multi-specialty group to recruit a Pulmonary/Sleep Medicine physician. This is an outpatient position with 75% pulmonary work and 25% sleep work and the physician needs to be Board Certified/Board Eligible in both. The physician...
...partnership with an innovative and fast-growing software company within the telecommunications industry, is seeking an experienced Junior Product Owner for their Long Island City, NY; Plano, TX; Bethpage, NY locations! This Junior Product Owner will work closely with the Lead...
...APPLYING: We're specifically seeking Headhunters (Agency Recruiters) rather than Corporate Recruiters & Sourcers due to the distinct... ...differences between these roles. At Verticalmove, a Technical Recruiter operates in a full-desk capacity, balancing both recruiting...