Lead Web Application Penetration Tester (On-Site)

GDH; Charlotte (NC); On-site; USD 76,000 - 83,000; Full time

Job summary

GDH in Charlotte, NC is seeking an experienced security tester to lead advanced web application and API assessments. You will perform comprehensive penetration testing to identify vulnerabilities in authentication, authorization, session management, and business workflows.

You will employ manual and automated techniques using Burp Suite and OWASP tooling, map endpoints, and deliver actionable remediation guidance to developers and stakeholders.

Qualifications

• Proven experience in web application penetration testing.
• Strong knowledge of OWASP Top 10 and API security.
• Experience with REST and GraphQL testing.
• Ability to analyze authentication, authorization, and session management.
• Excellent report writing and remediation advisory skills.

Responsibilities

• Lead and execute penetration tests of web apps and APIs.
• Test complex business workflows such as onboarding and checkout.
• Use Burp Suite and OWASP tools for manual and automated assessments.
• Analyze API security including authorization, token handling and surface mapping.
• Provide remediation guidance to developers and stakeholders.

Skills

Penetration testing

API security

Report writing

Education

Security certifications or equivalent experience

Tools

Burp Suite

OWASP testing tools

Job description

GDH in Charlotte, NC is seeking an experienced security tester to lead advanced web application and API assessments. You will perform comprehensive penetration testing to identify vulnerabilities in authentication, authorization, session management, and business workflows.

You will employ manual and automated techniques using Burp Suite and OWASP tooling, map endpoints, and deliver actionable remediation guidance to developers and stakeholders.