Application Security Pen Tester: Web & API Defender

ASM Research, An Accenture Federal Services Company; Topeka (KS); On-site; USD 110,000 - 137,000; Full time

Job summary

ASM Research, An Accenture Federal Services Company, seeks an Application Security Penetration Tester to safeguard web apps and REST APIs against threats. You will perform security assessments, review third‑party libraries, and conduct both automated and manual code reviews across Java/Scala apps.

You will write comprehensive reports, advise remediation, and integrate security into DevOps and CI/CD processes, bridging developers and stakeholders with clear security guidance.

Qualifications

• 3 years of Secure Code Review experience with Scala, Java, JavaScript and Spring.
• 3+ years of SAST and DAST experience.
• 3+ years of manual penetration testing of Web Apps and REST APIs with BurpSuite Pro.

Responsibilities

• Bridge development teams and stakeholders to communicate security requirements.
• Define and enforce application security best practices.
• Perform security assessments of third‑party libraries and dependencies.
• Analyze SAST/DAST/SCA reports and recommend remediations.
• Conduct static, dynamic, and pen tests of Web Apps and REST APIs.
• Lead security architecture and design reviews in SDLC.

Skills

OWASP Top 10

SANS 25

Security requirements

Remediation guidance

CI/CD security

Report writing

Education

Bachelor's in CS/SE

Tools

BurpSuite Pro

Postman

Bruno

Job description

ASM Research, An Accenture Federal Services Company, seeks an Application Security Penetration Tester to safeguard web apps and REST APIs against threats. You will perform security assessments, review third‑party libraries, and conduct both automated and manual code reviews across Java/Scala apps.

You will write comprehensive reports, advise remediation, and integrate security into DevOps and CI/CD processes, bridging developers and stakeholders with clear security guidance.