Remote CREST Pen Tester – Secure Web & Apps

TLScontact; United States; Remote; USD 94,000 - 121,000; Full time

Job summary

TLScontact is seeking a Security Testing Engineer (Pen Tester) to safeguard our visa and immigration platforms and applications. This role focuses on offensive security testing, vulnerability analysis, and secure development, collaborating with software engineering teams to reduce risk.

You will work to integrate security into the CI/CD pipeline, align with OWASP, NIST, and CIS controls, and ensure compliance with PCI DSS, GDPR, HIPAA, and SOC 2.

Qualifications

• Experience in penetration testing and security testing.
• Hands-on with security tools and scripting languages.
• Experience with CI/CD tools.
• Understanding of secure software development lifecycle.
• English fluency (B2 level or higher).
• CREST Registered certification required.

Responsibilities

• Perform offensive security testing (penetration testing) on web applications and services.
• Conduct manual and automated code analysis to detect vulnerabilities and non-trivial security issues.
• Support technical teams in resolving vulnerabilities and strengthening security measures.
• Develop and maintain security testing methodologies aligned with OWASP, NIST, and CIS Controls.
• Integrate security testing into the CI/CD pipeline to detect and fix vulnerabilities early.
• Ensure compliance with industry security regulations (PCI DSS, GDPR, HIPAA, SOC 2).
• Use PTES, MITRE ATT&CK, and CVSS scoring for standardized security assessments.
• Collaborate with developers and QA teams to build comprehensive security test strategies.
• Provide detailed security reports, analyze trends, and propose continuous improvements.

Tools

Burp Suite

OWASP ZAP

Metasploit

Checkmarx

Job description

TLScontact is seeking a Security Testing Engineer (Pen Tester) to safeguard our visa and immigration platforms and applications. This role focuses on offensive security testing, vulnerability analysis, and secure development, collaborating with software engineering teams to reduce risk.

You will work to integrate security into the CI/CD pipeline, align with OWASP, NIST, and CIS controls, and ensure compliance with PCI DSS, GDPR, HIPAA, and SOC 2.