Application Offensive Security Consultant

Pipe Recruit; Jersey City (NJ); Hybrid; Part time

Job summary

A leading security consultancy in Jersey City is seeking an Application Offensive Security Consultant to join its Application Security team. The role involves conducting penetration testing and security assessments on applications and APIs, as well as providing expert guidance on security risks and vulnerabilities. Candidates should have at least 6 years of web application security experience and 4 years with penetration testing tools. Relevant degrees and certifications are preferred. This position offers a flexible hybrid working model.

Qualifications

• 6+ years of experience in web application security testing.
• 4+ years of hands-on experience with penetration testing tools.
• Strong understanding of the MITRE ATT&CK Framework.

Responsibilities

• Conduct offensive security testing on applications and APIs.
• Perform manual penetration testing to identify vulnerabilities.
• Provide detailed vulnerability reports with remediation recommendations.

Skills

Web application security testing

Manual penetration testing

Vulnerability identification

Application threats evaluation

Security best practices implementation

Education

Bachelor's degree in a relevant field

Tools

Burp Suite

OWASP ZAP

Job description

Application Offensive Security Consultant

About the job Application Offensive Security Consultant

Job Title: Application Offensive Security Consultant

Job Type: Contract (Hybrid)

Job Summary

Join our Application Security team as part of our Technology Risk initiative to support offensive security assessments and provide expert guidance on key projects. As an Application Offensive Security Consultant, you will be responsible for penetration testing, security assessments, and vulnerability identification across applications and APIs.

Key Responsibilities

• Conduct offensive security testing on applications and APIs.
• Perform manual penetration testing to identify vulnerabilities beyond automated scans.
• Evaluate application threats and assess security risks.
• Provide detailed vulnerability reports with remediation recommendations.
• Collaborate with Security Architects, Product Managers, and Risk Managers to implement security best practices.
• Stay updated on emerging attack methodologies and security trends.

Required Skills & Experience

• 6+ years of experience in web application security testing.
• 4+ years of hands-on experience with penetration testing tools, such as:
• Burp Suite
• OWASP ZAP
• Strong understanding of:
• MITRE ATT&CK Framework
• Ability to manually discover vulnerabilities beyond automated scanning.
• Bachelors degree in a relevant field or equivalent experience.

Preferred Qualifications (Nice to Have)

• Certifications in offensive security/penetration testing, such as:
• OSCP (Offensive Security Certified Professional)
• CEH (Certified Ethical Hacker)
• Experience in Red Teaming and Adversarial Testing.
• Active participation in Capture the Flag (CTF) competitions or platforms like TryHackMe, HackTheBox.
• Ability to work under pressure, manage multiple tasks, and adapt to dynamic security challenges.