Penetration Tester: Web & API Security (Hybrid, GA)

Pyramid Consulting, Inc; Duluth (GA); Hybrid; USD 48,000 - 52,000; Full time

Job summary

Pyramid Consulting, Inc. is seeking a skilled Penetration Tester to assess web applications and APIs, perform manual and automated testing, and deliver actionable remediation guidance in a contract role based near Johns Creek, GA.

The position requires hands-on expertise with Burp Suite, OWASP ZAP, and Postman, a strong grip on OWASP Top 10, and the ability to document findings clearly for developers and security teams. Onsite two days per week in Johns Creek.

Qualifications

• Must have hands-on experience with web application penetration testing and API testing.
• Experience conducting manual and automated penetration tests and documenting findings.
• Ability to validate vulnerabilities and provide remediation guidance.

Responsibilities

• We are seeking an experienced Penetration Tester to assess the security of web applications and APIs, identify vulnerabilities, and provide actionable recommendations to strengthen the organization's security posture.
• The ideal candidate will have hands-on experience conducting manual and automated penetration tests, validating security weaknesses, documenting findings, and collaborating with development and security teams to support remediation.
• Conduct manual and automated penetration testing of web applications and APIs, including REST and SOAP services.
• Identify, validate, and exploit application vulnerabilities to assess their potential business and security impact.
• Perform security testing aligned with the OWASP Top 10 and other industry-recognized application security standards.
• Utilize tools such as Burp Suite, OWASP ZAP, Postman, and other penetration testing tools to discover and validate vulnerabilities.
• Assess authentication, authorization, access controls, session management, input validation, and data protection mechanisms.
• Develop test cases, proof-of-concept demonstrations, and detailed reproduction steps for identified vulnerabilities.
• Prepare comprehensive penetration testing reports with risk ratings, technical findings, and remediation recommendations.
• Collaborate with application developers, architects, and security teams to validate fixes and prevent recurring vulnerabilities.
• Support continuous improvement of application security testing methodologies, tools, and processes.
• Communicate technical findings and security risks clearly to technical and non-technical stakeholders.

Skills

Penetration testing

API testing

Web security testing

Vulnerability assessment

Tools

Burp Suite

OWASP ZAP

Postman

Job description

Pyramid Consulting, Inc. is seeking a skilled Penetration Tester to assess web applications and APIs, perform manual and automated testing, and deliver actionable remediation guidance in a contract role based near Johns Creek, GA.

The position requires hands-on expertise with Burp Suite, OWASP ZAP, and Postman, a strong grip on OWASP Top 10, and the ability to document findings clearly for developers and security teams. Onsite two days per week in Johns Creek.