Penetration Tester

ISoftech Inc; Woodlawn (MD); On-site; USD 110,000 - 170,000; Full time

Job summary

ISoftech Inc. in Woodlawn, MD seeks a skilled Web Application Penetration Tester to identify and exploit OWASP Top 10 vulnerabilities using manual techniques and Burp Suite Pro.

The role covers infrastructure testing, threat modeling, and risk analysis with a focus on translating risk into business terms. The candidate should hold an OSCP certification, a Bachelor's degree in a related field, and either hold or be eligible for a Public Trust clearance.

Qualifications

• Hands-on web application pentesting with focus on OWASP Top 10.
• Ability to translate technical risk into business context.
• Experience with threat modeling and vulnerability assessment practices.

Responsibilities

• Web Application Penetration Testing: identify and exploit OWASP Top 10 vulnerabilities using manual techniques and Burp Suite Pro.
• Infrastructure & Network Penetration Testing: assess internal/external networks, AD/IAM configurations, hypervisors, and server hardening.
• Vulnerability Assessment & Risk Analysis: use scanners and frameworks to quantify risk for business stakeholders.
• Security Testing: integrate security testing throughout the SDLC.

Skills

OWASP Top 10

Burp Suite Pro

Education

OSCP Certification

Bachelor’s Degree in Computer Science / Information Security / Cybersecurity

Public Trust Clearance

Tools

Burp Suite Pro

Job description

• Web Application Penetration Testing: Deep expertise in identifying and exploiting OWASP Top 10 vulnerabilities (e.g., injection flaws, broken auth, SSRF, insecure deserialization) using manual techniques and proxy tools (Burp Suite Pro).
• Infrastructure & Network Penetration Testing: Hands-on experience testing internal and external network perimeters, Active Directory/IAM configurations, hypervisors, and server hardening.
• Vulnerability Assessment & Risk Analysis: Proficiency with standard vulnerability scanners, threat modeling frameworks, and translating technical risks into business context.
• Security Testing: Experience embedding security testing methodologies throughout the software development lifecycle (SDLC).

Must-Have Qualifications:

• Active OSCP Certification (Offensive Security Certified Professional): Mandatory requirement.
• Bachelor’s Degree: In Computer Science, Information Security, Cybersecurity, or a related technical field.
• Public Trust Clearance: May hold/obtain active public trust clearance status.