Application Security Penetration Tester – Hybrid – Contract-to-Hire A large financial services organization is seeking an Application Security Penetration Tester for a hybrid, contract-to-hire position. This role supports the organization’s Technology Risk initiative by delivering offensive security assessments and guiding secure development across key projects. Join our Application Security team as part of our broader Technology Risk initiative. As an Application Security Penetration Tester, you’ll lead offensive security assessments, perform hands-on testing of applications and APIs, and provide expert guidance on key projects. Your goal: identify vulnerabilities before attackers do, and help build more secure software across the enterprise. Key Responsibilities Conduct offensive security testing on applications, APIs, and services. Perform targeted threat hunting to identify potential risks in application environments. Execute manual penetration testing beyond standard automated scans. Document and communicate vulnerabilities using a defined reporting format. Summarize assessment findings and support remediation efforts. Provide subject matter expertise on secure application design and defensive techniques. Collaborate with Security Architects, Product Managers, and Risk teams to ensure secure delivery across products. What You’ll Bring 6+ years of experience testing web applications for security vulnerabilities. 4+ years of hands-on experience with tools such as Burp Suite , OWASP ZAP , or similar. Strong manual testing skills and the ability to identify OWASP Top 10 issues without relying on scanners. Familiarity with adversarial methodologies and the MITRE ATT&CK Framework . A Bachelor’s degree or equivalent experience. Strong communication skills and the ability to work across multiple teams and priorities. Bonus Skills (Nice to Have) Exposure to penetration testing or red teaming methodologies. Participation in Capture The Flag (CTF) events or hands-on training platforms like TryHackMe or HackTheBox . Experience completing advanced security courses or labs. Interest in continuous learning and staying current on security trends. Note: Certifications (e.g., OSCP, OSWE, GPEN) are appreciated but not required . Why Join Us? You'll work in a collaborative, security-focused environment where your skills directly impact the safety and integrity of critical applications. If you're passionate about offensive security and enjoy digging deep into real-world risks, we’d love to hear from you. Flexible work from home options available. #J-18808-Ljbffr Synergistic Systems Inc
Careers With Purpose Sanford Health is one of the largest and fastest-growing not-for-profit health systems in the United States. We're proud to offer many development and advancement opportunities to our nearly 50,000 members of the Sanford Family who are dedicated...
...Social Media Intern - Student Video Assistant - IE Working Title: Social Media Intern - Student Video Assistant - IE State Role... ...After Effects, etc.) is preferred. Other software proficiencies (animation, motion graphics, etc.) are valued but not required....
...Gifted Healthcare is seeking a travel nurse RN NICU - Neonatal Intensive Care for a travel nursing job in Knoxville, Tennessee. Job... ...Per Diem, Government, and School-Based assignments as well as Interim Leadership services at premier facilities across the United States...
Whether you are searching for a position in your area or in another state, we have professionals to help you achieve your goals through our relationships with facilities nationwide - in rural settings, small cities, and major metropolitan areas. As the premier staffing ...
...Job Description Job Description Passionate about craft beer? Love a collaborative, team environment? Have experience in brewing? Beer-tending? Interested in getting involved with the industry? If so drop us a line... Beertenders here at Naukabout are swiss army...