Remote Web Application Penetration Tester

The Chronicle Of Higher Education, Inc.; Lynchburg (VA); On-site; USD 75,000 - 100,000; Full time

Job summary

The Chronicle of Higher Education, Inc. is seeking a security architecture expert to help architect and implement monitoring solutions with a focus on penetration testing.

You will advise teams on secure design and testing strategies, perform advanced web app testing, and lead the internal penetration testing program. You will work with product teams to understand architecture, communicate findings to developers, and help remediate issues while staying current on evolving threats and controls.

Qualifications

• Bachelor's degree in Computer Science, Information Security, Information Systems, or related field.
• 3-5 years' security experience with JavaScript, HTML, Python, Java, C#, or PowerShell.
• Experience with security technologies: penetration testing tools, SIEM, WAF, WAS, DNS security, DLP, EDR, email security, SOAR, IPS/IDS.

Responsibilities

• Provide SME security architecture expertise for secure design, testing strategy, and risk mitigation.
• Perform advanced web app penetration testing on internal apps to identify, validate, and prioritize vulnerabilities.
• Contribute to design and improvement of the internal penetration testing program.
• Standardize testing methods, documentation, workflows, and scoping guidelines.
• Lead pre-engagement scoping sessions with product teams to understand architecture and workflows.
• Deliver clear findings and communicate vulnerabilities to developers with varying security skill levels.
• Collaborate with development teams to remediate findings and retest fixes.
• Stay current on exploits, vulnerabilities, and defensive controls.
• Support incident investigations by documenting findings and assessing breaches for remediation.
• Provide strategic guidance to design solutions addressing security gaps in line with goals.

Skills

JavaScript

HTML

Python

Java

PowerShell

Education

Bachelor's degree in Computer Science, Information Security, Information Systems, or related field

Tools

Penetration testing tools

NTA

SIEM

WAF

WAS

DNS security

DLP

EDR

Email security

SOAR

IPS/IDS

Job description

The Chronicle of Higher Education, Inc. is seeking a security architecture expert to help architect and implement monitoring solutions with a focus on penetration testing.

You will advise teams on secure design and testing strategies, perform advanced web app testing, and lead the internal penetration testing program. You will work with product teams to understand architecture, communicate findings to developers, and help remediate issues while staying current on evolving threats and controls.