Remote Senior API & Cloud Security Tester

Distribusion Technologies; Berlin, Ellenton (GA, GA); Remote; USD 100,000 - 145,000; Full time

Job summary

Distribusion Technologies is seeking an experienced Senior Penetration Tester to join on a 6-month contract. You will perform hands-on security testing across partner-facing booking APIs, payment flows, and cloud infrastructure, collaborating with engineering squads to fix findings.

You bring 5+ years of web application and API testing, deep knowledge of OWASP API Security Top 10, WSTG and ASVS, and fluency with Burp Suite Pro. Remote-first with Berlin HQ, global teams, and competitive salary.

Qualifications

• 5+ years of hands-on penetration testing of web apps and APIs.
• Deep knowledge of OWASP API Security Top 10, WSTG and ASVS.
• Experience with red-teaming AI features or PCI-DSS is a bonus.
• Ability to write scripts (Python/Go) and build tooling.

Responsibilities

• Test partner APIs against OWASP API Top 10 and assess auth/authorization.
• Hunt for business-logic and race-condition issues in booking flows.
• Review cloud/Kubernetes configurations for attack paths.
• Write clear risk-rated findings and guide engineers to remediation.
• Lead tests of web/mobile apps with retests.

Skills

Penetration testing

Web APIs

OWASP API Security Top 10

Burp Suite Pro

Cloud & Kubernetes

CI/CD pipelines

Python

Go

OAuth2/OIDC

JWTs

Tools

Burp Suite Pro

Python

Go

Kubernetes

CI/CD

Job description

Distribusion Technologies is seeking an experienced Senior Penetration Tester to join on a 6-month contract. You will perform hands-on security testing across partner-facing booking APIs, payment flows, and cloud infrastructure, collaborating with engineering squads to fix findings.

You bring 5+ years of web application and API testing, deep knowledge of OWASP API Security Top 10, WSTG and ASVS, and fluency with Burp Suite Pro. Remote-first with Berlin HQ, global teams, and competitive salary.