Penetration Tester -Web & API testing

Pyramid Consulting, Inc; Duluth (GA); Ibrido; USD 48.000 - 52.000; Tempo pieno

Descrizione del lavoro

Pyramid Consulting, Inc. is seeking a skilled Penetration Tester to assess web applications and APIs, perform manual and automated testing, and deliver actionable remediation guidance in a contract role based near Johns Creek, GA.

The position requires hands-on expertise with Burp Suite, OWASP ZAP, and Postman, a strong grip on OWASP Top 10, and the ability to document findings clearly for developers and security teams. Onsite two days per week in Johns Creek.

Competenze

• Must have hands-on experience with web application penetration testing and API testing.
• Experience conducting manual and automated penetration tests and documenting findings.
• Ability to validate vulnerabilities and provide remediation guidance.

Mansioni

• We are seeking an experienced Penetration Tester to assess the security of web applications and APIs, identify vulnerabilities, and provide actionable recommendations to strengthen the organization's security posture.
• The ideal candidate will have hands-on experience conducting manual and automated penetration tests, validating security weaknesses, documenting findings, and collaborating with development and security teams to support remediation.
• Conduct manual and automated penetration testing of web applications and APIs, including REST and SOAP services.
• Identify, validate, and exploit application vulnerabilities to assess their potential business and security impact.
• Perform security testing aligned with the OWASP Top 10 and other industry-recognized application security standards.
• Utilize tools such as Burp Suite, OWASP ZAP, Postman, and other penetration testing tools to discover and validate vulnerabilities.
• Assess authentication, authorization, access controls, session management, input validation, and data protection mechanisms.
• Develop test cases, proof-of-concept demonstrations, and detailed reproduction steps for identified vulnerabilities.
• Prepare comprehensive penetration testing reports with risk ratings, technical findings, and remediation recommendations.
• Collaborate with application developers, architects, and security teams to validate fixes and prevent recurring vulnerabilities.
• Support continuous improvement of application security testing methodologies, tools, and processes.
• Communicate technical findings and security risks clearly to technical and non-technical stakeholders.

Conoscenze

Penetration testing

API testing

Web security testing

Vulnerability assessment

Strumenti

Burp Suite

OWASP ZAP

Postman

Descrizione del lavoro

Immediate need for a talented Penetration Tester -Web & API testing. This is a 12+ Months Contract opportunity with long-term potential and is located in John Creeks, GA (Hybrid). Please review the job description below and contact me ASAP if you are interested.

Job ID:26-34417

Pay Range: $35 - $38/hour. Employee benefits include, but are not limited to, health insurance (medical, dental, vision), 401(k) plan, and paid sick leave (depending on work location).

Key Responsibilities:

• We are seeking an experienced Penetration Tester to assess the security of web applications and APIs, identify vulnerabilities, and provide actionable recommendations to strengthen the organization's security posture.
• The ideal candidate will have hands‑on experience conducting manual and automated penetration tests, validating security weaknesses, documenting findings, and collaborating with development and security teams to support remediation.
• Conduct manual and automated penetration testing of web applications and APIs, including REST and SOAP services.
• Identify, validate, and exploit application vulnerabilities to assess their potential business and security impact.
• Perform security testing aligned with the OWASP Top 10 and other industry‑recognized application security standards.
• Utilize tools such as Burp Suite, OWASP ZAP, Postman, and other penetration testing tools to discover and validate vulnerabilities.
• Assess authentication, authorization, access controls, session management, input validation, and data protection mechanisms.
• Develop test cases, proof‑of‑concept demonstrations, and detailed reproduction steps for identified vulnerabilities.
• Prepare comprehensive penetration testing reports with risk ratings, technical findings, and remediation recommendations.
• Collaborate with application developers, architects, and security teams to validate fixes and prevent recurring vulnerabilities.
• Support continuous improvement of application security testing methodologies, tools, and processes.
• Communicate technical findings and security risks clearly to technical and non‑technical stakeholders.

Key Requirements and Technology Experience:

• Must Have’s : Strong experience with web application penetration testing and API penetration testing.
• Ability to work onsite in Johns Creek, GA, two days per week.
• Proven hands‑on experience in penetration testing, application security, or offensive security.
• Strong experience with web application penetration testing and API penetration testing.
• Practical knowledge of REST APIs, SOAP services, HTTP/HTTPS, and common web application technologies.
• Proficiency with Burp Suite, OWASP ZAP, Postman, or comparable security testing tools.
• Strong understanding of the OWASP Top 10, common API vulnerabilities, authentication, authorization, and access‑control weaknesses.
• Experience documenting vulnerabilities, assessing risk, and providing remediation guidance.
• Strong analytical, troubleshooting, written communication, and reporting skills.
• Ability to work onsite in Johns Creek, GA, two days per week.

Our client is a leading IT Industry and we are currently interviewing to fill this and other similar contract positions.

Pyramid Consulting, Inc. provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.