Application Security Penetration Tester (BurpSuite Pro)

ASM Research, An Accenture Federal Services Company; Salem (OR); On-site; USD 110,000 - 137,000; Full time

Job summary

ASM Research, An Accenture Federal Services Company, seeks an Application Security Penetration Tester to safeguard web apps and REST APIs. You will perform automated and manual reviews, identify CSRF, XSS, SQLi, and privilege escalation issues, and deliver remediation guidance using BurpSuite Pro.

You will bridge developers and stakeholders, enforce secure coding practices, review security architecture, and integrate security tools into CI/CD workflows while producing detailed reports for risk

Qualifications

• 3+ years secure code review (Scala/Java/JS/Spring).
• 3 years SAST/DAST experience.
• 3+ years manual pentesting of Web Apps/REST APIs with BurpSuite Pro.
• Secure coding practices and DevSecOps knowledge.
• Proficiency in OWASP Top 10 and SANS 25.

Responsibilities

• Define and enforce security requirements across SDLC.
• Perform static, dynamic, and manual security testing of Web Apps/REST APIs.
• Analyze third‑party libraries and dependencies for risk.
• Interpret SAST/DAST/SCA findings and provide remediation guidance.
• Prepare comprehensive reports and remediation recommendations.
• Bridge developers and stakeholders on security issues and fixes.

Skills

Security requirements liaison

AppSec best practices

OWASP Top 10

SAST/DAST knowledge

CI/CD & DevSecOps

Tools

BurpSuite Pro

Postman

Bruno

Jenkins

GitHub

Job description

ASM Research, An Accenture Federal Services Company, seeks an Application Security Penetration Tester to safeguard web apps and REST APIs. You will perform automated and manual reviews, identify CSRF, XSS, SQLi, and privilege escalation issues, and deliver remediation guidance using BurpSuite Pro.

You will bridge developers and stakeholders, enforce secure coding practices, review security architecture, and integrate security tools into CI/CD workflows while producing detailed reports for risk