Penetration Tester / Senior Application Security Test Engineer

You will lead the Application Security Testing Program, identifying vulnerabilities through penetration testing and automated scanning. Responsibilities • Conduct software security testing and penetration testing to identify bugs, coding errors, and defects. • Introduce automated testing of fixed vulnerabilities into CI/CD processes. • Develop application-specific threat models to identify design flaws and provide guidance on risks and controls. • Review and inspect source code to advise developers on vulnerability remediation. • Design strategy, standards, and architecture for security aspects of the SDLC, including mobile, web services, cloud, and DevOps. Required Skills • 7+ years of related experience in web application penetration testing and software development/testing. • Bachelor’s degree in Computer Science, Computer Engineering, or a closely related IT field. • Expert knowledge of application vulnerability types, attack vectors, and remediation approaches. • Expertise in DAST solutions and techniques, with familiarity in SAST, IAST, and RAST. • Experience with continuous delivery and continuous integration workflows. • Solid understanding of secure code reviews, threat modeling, and architectural risk analysis. • Knowledge of web application full-stack architecture and network models. • Experience leading the creation and adoption of enterprise security testing tools. • Certifications: CISSP, GPEN, GWAPT, OSCP, or CEH. Preferred Skills • Java programming skills, including knowledge of JSSE and security features. • Experience with .NET, ASP, or C#. • Working knowledge of Java development environments and tools such as Eclipse, Spring, Jenkins, Maven, Jira, and Selenium.