Security Tester

Apexon; Pennsylvania; On-site; USD 90,000 - 140,000; Full time

Job summary

Apexon in the United States (Pennsylvania) is seeking a Security Testing Specialist to perform manual and automated assessments of web applications, focusing on DAST, SAST, and penetration testing.

You will analyze findings, reproduce issues, document risk with PoC evidence, and collaborate with developers to remediate vulnerabilities, supporting SDLC security reviews and threat assessments.

Qualifications

• Experience performing security assessments for web applications.
• Knowledge of dynamic and static testing methodologies.
• Ability to analyze findings and reproduce vulnerabilities.

Responsibilities

• Perform manual and automated web app security assessments to identify weaknesses.
• Conduct DAST and SAST using industry-standard tools and methodologies.
• Execute secure code reviews across modern frameworks to identify vulnerabilities.
• Analyze findings, assign risk, and provide remediation recommendations with PoC evidence.
• Prepare detailed assessment reports with findings, risk ratings, and corrective actions.
• Collaborate with development teams to validate remediation and verify fixes.
• Provide guidance on secure architecture and secure SDLC practices.
• Support vulnerability management activities including tracking and prioritization.
• Participate in security reviews, threat assessments, and risk evaluations.

Skills

DAST

Penetration Testing

SAST

Education

CEH

OSCP

Job description

• Dynamic App Security Testing (DAST): Advanced
• Penetration Testing - Manual: Advanced
• Static App Security Testing (SAST): Advanced.

Preferred Skills: Same as above.

• Certifications like CEH, OSCP are preferred but not mandatory.

Responsibilities:

• \"Perform manual and automated web application security assessments to identify security weaknesses and validate application resilience.
• Conduct Dynamic Application Security Testing (DAST) and Static Application Security Testing (SAST) using industry-standard security tools and methodologies.
• Execute secure code reviews across modern application frameworks and technologies to identify coding vulnerabilities and security gaps. Analyze, validate, reproduce, and document security vulnerabilities while eliminating false positives.
• Assess security findings, determine risk ratings and business impact, and provide practical remediation recommendations. Prepare detailed security assessment reports, including findings, proof-of-concept evidence, risk assessments, and corrective actions.
• Collaborate with development teams to review, validate, and verify remediation of identified vulnerabilities.
• Provide guidance on secure application architecture, design principles, and secure software development best practices.
• Support vulnerability management activities, including tracking, prioritization, and remediation of security issues.
• Partner with developers, architects, and project stakeholders to integrate security throughout the Software Development Lifecycle (SDLC). Participate in security reviews, threat assessments, and application risk evaluations to strengthen overall application security posture.
• Contribute to continuous improvement of application security processes, standards, and testing methodologies.
• \" Expected Deliverable(s): Security Testing