Remote Web App Penetration Testing Expert

Fairweather, LLC; Orlando (FL); Hybrid; USD 196,000 - 242,000; Full time

Benefits offered by this job

Inclusive team

Growth opportunities

Hybrid & Remote work

Competitive compensation

Job summary

Horizon3.ai is seeking a Webapp Offensive Security Engineer to perform hands-on web application pentesting against real customer apps, including live environments. You will identify edge cases, validate findings, and craft production-safe exploit PoCs while collaborating with software engineers to improve NodeZero coverage.

The role emphasizes testing live targets and documenting results, with mentorship to teammates and ongoing process improvements.

Qualifications

• Extensive hands-on experience conducting full-scope web application penetration tests.
• Deep knowledge of web vulnerabilities (SQLi, XSS, SSRF, IDOR, LFI, etc.) and exploitation chaining.
• Ability to clearly communicate attack steps, impact, and remediation guidance.

Responsibilities

• Perform hands-on, full-scope web app penetration tests against real customer applications.
• Review NodeZero results to identify coverage gaps and edge-case attack scenarios.
• Manually reproduce edge cases and build production-safe PoCs.
• Partner with engineers to translate findings into product improvements and remediation.
• Maintain a library of regression and benchmark test cases.

Skills

Web app pentesting

Burp Suite

Python scripting

Communication skills

AI tooling familiarity

Tools

Browser developer tools

Job description

Horizon3.ai is seeking a Webapp Offensive Security Engineer to perform hands-on web application pentesting against real customer apps, including live environments. You will identify edge cases, validate findings, and craft production-safe exploit PoCs while collaborating with software engineers to improve NodeZero coverage.

The role emphasizes testing live targets and documenting results, with mentorship to teammates and ongoing process improvements.