Application Security Pen Tester for Web & API

ASM Research, An Accenture Federal Services Company; Nashville (TN); On-site; USD 110,000 - 137,000; Full time

Job summary

ASM Research, An Accenture Federal Services Company, is seeking an Application Security Penetration Tester to safeguard web apps and REST APIs. You will analyze third-party libraries, perform both automated and manual reviews, and report findings with remediation guidance.

You will bridge developers and stakeholders, define secure coding standards, and integrate security tools into CI/CD. Proficiency with BurpSuite Pro, SAST/DAST, and knowledge of OWASP Top 10 is essential for success in this

Qualifications

• Serve as a liaison between development teams and stakeholders to understand and formulate security requirements.
• Define, maintain, and enforce application security best practices.
• Deep understanding of OWASP Top 10, SANS 25
• Perform third-party libraries security assessment and dependency analysis.
• Conduct vulnerability assessment and manual/automated code review of Java and Scala applications to find security vulnerabilities (CSRF, XSS, SQL Injection, Privilege Escalation, etc.) and recommend remediation.
• Analyze scan reports from varied tools (SAST, DAST and SCA) to identify the issues, interpretate, and provide recommendation to remediate the vulnerabilities across a variety of applications, programming languages, and platforms
• Conduct static, dynamic and penetration security testing of Web Applications and REST APIs.
• Performs software security architecture and design reviews.
• Write comprehensive reports including assessment-based findings, outcomes, and propositions for further system security enhancement.
• Identify and demonstrate vulnerabilities to application owners and recommend remediation for security vulnerabilities.
• Knowledge of scripting language to integrate and automate security tools within DevOps CI/CD processes.

Skills

Liaison between teams

Security requirements definition

Security best practices enforcement

OWASP Top 10

SANS 25 knowledge

CI/CD DevSecOps familiarity

Scripting for automation

Tools

BurpSuite Pro

Postman

Job description

ASM Research, An Accenture Federal Services Company, is seeking an Application Security Penetration Tester to safeguard web apps and REST APIs. You will analyze third-party libraries, perform both automated and manual reviews, and report findings with remediation guidance.

You will bridge developers and stakeholders, define secure coding standards, and integrate security tools into CI/CD. Proficiency with BurpSuite Pro, SAST/DAST, and knowledge of OWASP Top 10 is essential for success in this