Remote Senior Penetration Tester & DevSecOps Engineer

Capgemini; Northern (KY); Hybrid; USD 70,000 - 170,000; Full time

Benefits offered by this job

Medical, dental, and vision coverage

401(k) plan

Paid time off

Job summary

Capgemini is seeking a Senior Security Consultant for Penetration Testing & DevSecOps with 5-8 years of cybersecurity experience. The role focuses on security assessments across applications, APIs, cloud environments, and CI/CD pipelines, embedding security throughout the software development lifecycle.

The candidate will collaborate with development teams to remediate vulnerabilities, support threat modeling, and promote secure coding practices in modern architectures.

Qualifications

• 5-8 years of hands-on cybersecurity experience.
• Minimum 3+ years of experience conducting application and API penetration testing.
• Experience implementing or supporting DevSecOps initiatives within CI/CD environments.

Responsibilities

• Perform manual and automated penetration testing of web applications, APIs, mobile apps, cloud environments, and supporting infrastructure.
• Conduct reconnaissance, vulnerability discovery, exploitation, and post-exploitation activities following industry-standard methodologies.
• Identify security vulnerabilities, validate exploitability, assess business risk, and provide remediation recommendations.
• Execute security assessments against microservices, containers, Kubernetes, and cloud-native apps.

Skills

Web App Security

API Security

Secure SDLC

OWASP Top 10

MITRE ATT&CK

Threat Modeling

Vulnerability Management

Burp Suite

Nmap

Nessus/Qualys/Tenable

Metasploit

Kali Linux

Checkmarx

Veracode

Snyk

SonarQube

GitHub Actions/Azure DevOps/Jenkins

Education

Bachelor's degree in Computer Science, Information Security, Engineering, or a related field

Tools

Burp Suite Professional

Nessus

Qualys

Tenable

Metasploit

Kali Linux

Job description

Capgemini is seeking a Senior Security Consultant for Penetration Testing & DevSecOps with 5-8 years of cybersecurity experience. The role focuses on security assessments across applications, APIs, cloud environments, and CI/CD pipelines, embedding security throughout the software development lifecycle.

The candidate will collaborate with development teams to remediate vulnerabilities, support threat modeling, and promote secure coding practices in modern architectures.