Security Tester

krg technology inc; Portland (OR); On-site; USD 80,000 - 100,000; Full time

Job summary

A leading tech firm in Portland, Oregon, is looking for a professional with a strong background in security principles and web application testing. Candidates should have at least 4 years of experience in manual and automation testing, as well as familiarity with security tools such as OWASP top 10 and SANS top 25. Security certifications like GIAC, CISSP, CEH, or Security + are beneficial. The role involves guiding development teams in remediation planning and implementing security best practices.

Qualifications

• 4+ years of experience in security testing of web applications.
• Experience supporting development teams through remediation plans.
• Familiarity with security tools configuration.

Skills

Security principles

OWASP top 10

SANS top 25

Manual and automation testing

Security tools (AppScan, Burp, Checkmarx, Fortify)

Education

Security certification (GIAC, CISSP, CEH, Security +)

Job description

1. Working knowledge of security principles, techniques and technologies such as OWASP top 10 and SANS top 25 classification system. Including knowing them by definition, know how to test and remediate them.

2. Experience supporting development teams to guide them all through remediation plans of code and challenges.

3. Mandatory familiarity with following Security tools - AppScan, Burp, Checkmarx or Fortify (configuration experience needed)

4. 4+ years of experience in both manual and automation testing on web applications

5. Security certification such as GIAC, CISSP, CEH, Security + an added advantage (Atleast 1 desired)