Senior Penetration Tester (WebApp and Network)

Rapid Strategy; Polska; Hybrid; PLN 341,297 - 568,828; Full time

Job summary

Rapid Strategy is seeking a Mid to Senior Level Penetration Test Consultant for web apps and network security. This role focuses on simulating cyber attacks to identify weaknesses and deliver actionable remediation guidance.

The position offers mainly remote work with possible travel. Applicants must be U.S. citizens based in the United States; CEH/OSCP/GWAPT are preferred certifications and a strong background in web app security is required.

Qualifications

• Bachelor’s degree in Computer Science, Information Security, or related field, OR equivalent experience.
• 5–8 years of experience in penetration testing.
• Certifications such as CEH, OSCP, or GWAPT.

Responsibilities

• Conduct penetration tests on web applications to identify vulnerabilities.
• Utilize testing tools and methodologies to simulate cyber attacks.
• Analyze web applications for weaknesses using manual and automated methods.
• Understand and exploit known web vulnerabilities like SQLi, XSS, CSRF.
• Prepare detailed reports and provide security improvement recommendations.
• Collaborate with development teams to advise on security best practices.
• Stay updated on the latest cybersecurity threats and testing methods.

Skills

Penetration testing

Analytical thinking

Communication skills

Problem solving

Education

Bachelor’s degree in Computer Science or related field

Equivalent experience accepted

Tools

Tenable

Burp Suite

NMap

OWASP ZAP

Metasploit

SQLMap

Job description

Rapid Strategy is seeking a Mid to Senior Level Penetration Test Consultants for both web apps and network. Rapid Strategy is an award-winning and African-American owned small business providing cybersecurity services to the private and public sector. Based in Charlotte, NC, we support our clients across the North Carolina and DMV area. You can learn more about Rapid Strategy at www.RapidStrategy.io

The primary objective of the Penetration Tester is to simulate cyber attacks on web applications to identify security vulnerabilities before they can be exploited by malicious actors. This role involves a combination of analytical skills, technical expertise, and creativity to simulate real-world hacking scenarios.

Key Responsibilities:

• Conducting thorough penetration tests on web applications to identify vulnerabilities.
• Utilizing various penetration testing tools and methodologies to simulate cyber attacks.
• Analyzing web applications for weaknesses and vulnerabilities using manual and automated methods.
• Understanding and exploiting known web vulnerabilities such as SQL injection, Cross-Site Scripting (XSS), Cross-Site Request Forgery (CSRF), and others.
• Preparing detailed reports on findings and providing recommendations for security improvements.
• Collaborating with development teams to advise on security best practices.
• Keeping abreast of the latest cybersecurity threats and testing methodologies.

Required Skills and Qualifications

• Bachelor’s degree in Computer Science, Information Security, or related field, OR equivalent experience also accepted.
• 5-8 years of experience
• Industry certifications such as Certified Ethical Hacker (CEH), Offensive Security Certified Professional (OSCP), or GIAC Web Application Penetration Tester (GWAPT).
• Strong understanding of web application technologies and protocols (HTTP/HTTPS, HTML, JavaScript, etc.).
• Proficiency tools like Tennable, Burp Suite, NMap, OWASP ZAP, Metasploit, SQLMap, etc.
• Experience with known exploits and their mitigation.
• Ability to analyze and report on penetration testing outcomes effectively.
• Excellent problem-solving and analytical skills.
• Strong communication skills for collaboration with cross-functional teams.

Desirable Skills

• Experience with programming/scripting languages such as Python, JavaScript, and Ruby.
• Expert knowledge of network security and operating systems.
• Familiarity with cloud environments and container technologies

This role will be primarily remote but may require travel.

Please note that this position requires applicants to be U.S. citizens and based in the United States. Only individuals who meet these criteria will be considered for employment.