Cloud & Web Apps Penetration Tester

TP-Link Systems Inc.; Irvine (CA); On-site; USD 80,000 - 132,000; Full time

Benefits offered by this job

Medical, dental, and vision insurance

401k with employer contributions

Vacation and holidays

Performance reviews and raises

Wellness benefits and gym membership

Team-building events

Job summary

TP-Link Systems Inc. in Irvine seeks a Penetration Tester to support cloud services and security for web and mobile apps. You will work with senior engineers on testing, threat modeling, and security assessments to strengthen cloud security.

Ideal candidates have 1–3 years in security engineering, strong OWASP Top 10 knowledge, and hands-on use of Burp Suite, OWASP ZAP, Nmap, Kali, Nessus or Metasploit. You will assist incident response, risk assessment, and CI/CD security initiatives within a

Qualifications

• 1–3 years as Security Engineer (Cloud & Web) or similar role.
• Strong knowledge of web/app security and cloud security concepts.
• Experience with security tools listed in qualifications.
• Proficient in at least one programming language (Python/JS/Bash/PowerShell).
• Familiar with AWS/Azure/GCP and their security controls.
• Certs (CEH/OSWP) are highly preferred; CVEs are a plus.

Responsibilities

• Penetration testing on cloud services, web apps, and APIs with remediation reports.
• Threat modeling and security assessments for cloud components.
• Incident response support and vulnerability management.
• Analyze cloud security configurations and fix misconfigurations.
• Develop pen-testing tools and automate testing for cloud environments.
• Contribute to CI/CD security processes across the lifecycle.
• Interpret security standards and regulatory requirements.

Skills

Web security

Cloud security

API security

OWASP Top 10

Programming (Python/JS/Bash/PowerShell

Security tools usage

Education

Bachelor's degree in CS/Info Security or related

Tools

Burp Suite

OWASP ZAP

Nmap

Kali Linux

Nessus

Metasploit

Job description

TP-Link Systems Inc. in Irvine seeks a Penetration Tester to support cloud services and security for web and mobile apps. You will work with senior engineers on testing, threat modeling, and security assessments to strengthen cloud security.

Ideal candidates have 1–3 years in security engineering, strong OWASP Top 10 knowledge, and hands-on use of Burp Suite, OWASP ZAP, Nmap, Kali, Nessus or Metasploit. You will assist incident response, risk assessment, and CI/CD security initiatives within a