Remote Penetration Tester, Secure SDLC

Jobgether; Tempe (AZ); Remote; USD 100,000 - 106,000; Full time

Job summary

The specialist will execute end-to-end penetration tests on Web apps, APIs, and cloud infrastructure, supporting Secure Development Lifecycle and governance. Strong knowledge of OWASP, cloud attacks, and security tools is required, with global collaboration across teams.

Qualifications

• 4–6 years of hands-on web and API penetration testing experience.
• Familiar with OWASP Top Ten, OSTMM, and WASC.
• Experience with Azure and AWS cloud attacks.
• Knowledge of authentication, authorization, data access, and encryption.
• Security assessment activities with reporting and stakeholder communications.
• Strong communication and project management skills.
• Hands-on with Burp Suite Pro and web scanners.

Responsibilities

• Participate in penetration testing, scoping and test planning.
• Identify vulnerabilities and propose mitigations across apps and APIs.
• Mature testing strategy for early detection of issues.
• Validate security of web, API, backend, cloud, and microservices.
• Integrate security tools into CI/CD and promote Secure SDLC.
• Communicate findings to distributed teams and stakeholders.

Skills

Web pen testing

API pen testing

OWASP Top Ten

OSTMM

WASC

Cloud security

Burp Suite Pro

SAST tools

Communication

Project management

Python

Java/.NET

Education

Bachelor’s or Master’s degree in CS or related

Security certifications (OSCP, GWAPT, CEH, CCSK, CCSP, GCPN)

Tools

Burp Suite Pro

IBM AppScan

Acunetix

Rapid7

Checkmarx

Fortify

Veracode

BlackDuck

Job description

The specialist will execute end-to-end penetration tests on Web apps, APIs, and cloud infrastructure, supporting Secure Development Lifecycle and governance. Strong knowledge of OWASP, cloud attacks, and security tools is required, with global collaboration across teams.