Security Engineer - Pentesting

Randstad USA; Minneapolis (MN); On-site; USD 124,000 - 128,000; Part time

Job summary

Randstad Digital in Minnesota is seeking a Security Engineer to join our enterprise cybersecurity team. You will perform end-to-end penetration testing and threat analysis on web applications and APIs, collaborating with engineering teams to identify vulnerabilities and develop automation tools.

This contract role requires a Bachelor's degree and 5+ years of security testing experience with Burp Suite and Nmap; Python or Go scripting; OSCP/CISSP preferred.

Qualifications

• Bachelor''s degree required; 7+ years in cybersecurity.
• 5+ years of hands-on penetration testing experience targeting web apps & APIs.

Responsibilities

• Execute end-to-end penetration tests covering scoping, exploitation, validation, and reporting for web applications and APIs.
• Identify web application vulnerabilities such as OWASP Top 10, injection attacks, and authentication/authorization flaws.
• Utilize advanced security testing tools, including Burp Suite, Nmap, and common exploitation frameworks.
• Write custom scripts and automations in Python or Go to streamline security testing workflows.
• Partner directly with engineering teams to validate security findings and provide actionable remediation guidance.
• Document comprehensive technical findings and support threat modeling to identify risk areas pre-deployment.

Skills

Penetration testing

Python

Go

Security tooling

Education

Bachelor''s degree in Computer Science, Cybersecurity, or equivalent practical experience

Tools

Burp Suite

Nmap

Job description

job summary:

ABOUT THE ROLE

We are seeking a Security Engineer to join our enterprise Cyber Security team. In this role, you will play a key part in safeguarding complex web applications and APIs through comprehensive penetration testing and threat analysis. You will collaborate directly with engineering teams to identify vulnerabilities, develop automation tools, and implement robust security remediations.

location: Brooklyn Park, Minnesota

job type: Contract

salary: $89.85 - 92.85 per hour

work hours: 8am to 5pm

education: Bachelors

responsibilities:

DAY-TO-DAY RESPONSIBILITIES

• Execute end-to-end penetration tests covering scoping, exploitation, validation, and reporting for web applications and APIs.
• Identify web application vulnerabilities such as OWASP Top 10, injection attacks, and authentication/authorization flaws.
• Utilize advanced security testing tools, including Burp Suite, Nmap, and common exploitation frameworks.
• Write custom scripts and automations in Python or Go to streamline security testing workflows.
• Partner directly with engineering teams to validate security findings and provide actionable remediation guidance.
• Document comprehensive technical findings and support threat modeling to identify risk areas pre-deployment.

qualifications:

Bachelor's degree in Computer Science, Cybersecurity, or equivalent practical experience with 7+ years in cybersecurity.

5+ years of hands-on penetration testing experience specifically targeting web applications and APIs.

Advanced expertise with security testing tools, including Burp Suite and Nmap, along with strong scripting skills in Python or Go.

PREFERRED QUALIFICATIONS

Professional certifications such as OSCP, OSCE, OSWE, or CISSP.

Experience testing mobile apps, hardware, embedded systems, or third-party vendor solutions.

Familiarity with PCI compliance penetration testing requirements and bug bounty program management.

skills:

APIs,Burp Suite,cybersecurity professional,Mobile application,Nmap,Python,application security,penetration testing,vulnerability management,web applications,excellent communication skills,Scripting & Automation,CISSP,embedded systems,bug bounty,OSCE,risk identification,risks,Security,Security Testing Tools,technical proficiency,threat modeling

Equal Opportunity Employer:

Race, Color, Religion, Sex, Sexual Orientation, Gender Identity, National Origin, Age, Genetic Information, Disability, Protected Veteran Status, or any other legally protected group status.

At Randstad Digital, we welcome people of all abilities and want to ensure that our hiring and interview process meets the needs of all applicants. If you require a reasonable accommodation to make your application or interview experience a great one, please contact [e-mail].

Pay offered to a successful candidate will be based on several factors including the candidate's education, work experience, work location, specific job duties, certifications, etc. In addition, Randstad Digital offers a comprehensive benefits package, including: medical, prescription, dental, vision, AD&D, and life insurance offerings, short-term disability, and a 401K plan (all benefits are based on eligibility).

This posting is open for thirty (30) days.

Bachelor's degree in Computer Science, Cybersecurity, or equivalent practical experience with 7+ years in cybersecurity.5+ years of hands-on penetration testing experience specifically targeting web applications and APIs.Advanced expertise with security testing tools, including Burp Suite and Nmap, along with strong scripting skills in Python or Go.PREFERRED QUALIFICATIONSProfessional certifications such as OSCP, OSCE, OSWE, or CISSP.Experience testing mobile apps, hardware, embedded systems, or third-party vendor solutions.Familiarity with PCI compliance penetration testing requirements and bug bounty program management.