Application Security Penetration Tester – Hybrid – Contract-to-Hire A large financial services organization is seeking an Application Security Penetration Tester for a hybrid, contract-to-hire position. This role supports the organization’s Technology Risk initiative by delivering offensive security assessments and guiding secure development across key projects. Join our Application Security team as part of our broader Technology Risk initiative. As an Application Security Penetration Tester, you’ll lead offensive security assessments, perform hands-on testing of applications and APIs, and provide expert guidance on key projects. Your goal: identify vulnerabilities before attackers do, and help build more secure software across the enterprise. Key Responsibilities Conduct offensive security testing on applications, APIs, and services. Perform targeted threat hunting to identify potential risks in application environments. Execute manual penetration testing beyond standard automated scans. Document and communicate vulnerabilities using a defined reporting format. Summarize assessment findings and support remediation efforts. Provide subject matter expertise on secure application design and defensive techniques. Collaborate with Security Architects, Product Managers, and Risk teams to ensure secure delivery across products. What You’ll Bring 6+ years of experience testing web applications for security vulnerabilities. 4+ years of hands-on experience with tools such as Burp Suite , OWASP ZAP , or similar. Strong manual testing skills and the ability to identify OWASP Top 10 issues without relying on scanners. Familiarity with adversarial methodologies and the MITRE ATT&CK Framework . A Bachelor’s degree or equivalent experience. Strong communication skills and the ability to work across multiple teams and priorities. Bonus Skills (Nice to Have) Exposure to penetration testing or red teaming methodologies. Participation in Capture The Flag (CTF) events or hands-on training platforms like TryHackMe or HackTheBox . Experience completing advanced security courses or labs. Interest in continuous learning and staying current on security trends. Note: Certifications (e.g., OSCP, OSWE, GPEN) are appreciated but not required . Why Join Us? You'll work in a collaborative, security-focused environment where your skills directly impact the safety and integrity of critical applications. If you're passionate about offensive security and enjoy digging deep into real-world risks, we’d love to hear from you. Flexible work from home options available. #J-18808-Ljbffr Synergistic Systems Inc
...Caldwell Electrical Contractors, Inc is a Design/Build electrical & automation contractor actively seeking a highly talented Electrical... ...and performance-related benefits. With a focus on the Industrial markets, we pride ourselves on our ability to work collaboratively...
...level fiber and copper cable installation including termination, assembly, and dressing to satisfy customer requirements Independently... ...~ Minimum of 1 manufacturer certification (i.e. CommScope, B-Line, etc.) preferred but not required ~ Man lift certification and...
...Job Description Job Title: Director, US Market Access Portfolio Execution Location: Morristown, NJ, Cambridge, MA About the... ...disorders, cancers, and neurological disorders. From R&D to sales, our talented teams work together, revolutionizing treatment, continually...
Research Associate in Biomedical Informatics Location: Philadelphia, PA Open Date: Aug 14, 2023 Close Date: Aug 14, 2... ...epidemiology, life stage-focused epidemiology, health behavior, healthcare delivery & health equity, and/or the design, evaluation, and...
...in Southaven, MS. We are now hiring Energized SWING SHIFT FORKLIFT OPERATORS who are team players, versatile, and dependable!... ...appropriate forklift QUALIFICATIONS Experience operating Cherry Picker Forklift is REQUIRED . Experience operating Reach Truck...