Penetration TesterLocation: RemoteRate: $50/hr W2Responsibilities: Perform manual application penetration testing against API's (REST/SOAP), web applications, mobile applications, and thick client applicationsPerform threat modeling, evaluate application business logic, and perform application architecture reviewsAbility to demonstrate application testing experience in real time via demos to both internal and external audiencesAbility to perform objective based, abstract penetration testing engagementsAbility to develop and exploit POCsAct independently in penetration testing engagements, with minimal oversight and guidanceEngage with technical and non-technical audiences to articulate both testing processes, techniques and results; guide technical audiences on remediation options and assist clients in weighing those optionsQualifications: Minimum 5 years of recent experience in application penetration testing of API's, web applications and mobile applicationsAbility to communicate reporting results with technical and non-technical audiences and lead remediation conversationsExperience with burp suite pro, and other app testing tools such as NetsparkerBachelor's degree from an accredited college/university or equivalent industry experienceOne or more major ethical hacking certifications not required but preferred; GWAPT, CREST, OSWE, OSWA
