Security Tester, Remote, , US

Intellibee; United States; Remote; USD 90,000 - 130,000; Full time

Job summary

IntelliBee is seeking a Security QA Engineer/Tester to perform dynamic and static security testing of web applications from a fully remote US-based team. You will identify vulnerabilities, validate fixes, and collaborate with development to embed security into the SDLC.

Candidates should have hands-on experience with DAST, SAST, and manual penetration testing, and may hold certifications like CEH or OSCP. Strong reporting and remediation guidance are essential.

Qualifications

• Requires hands-on experience with dynamic and static application security testing.
• Experience performing manual penetration testing on web apps.
• Ability to analyze findings and provide remediation guidance.

Responsibilities

• Perform manual and automated web application security assessments to identify weaknesses and validate resilience.
• Conduct DAST and SAST using industry-standard tools and methodologies.
• Execute secure code reviews across modern frameworks to identify vulnerabilities.
• Analyze, reproduce, and document vulnerabilities while eliminating false positives.
• Assess findings, determine risk, and provide remediation recommendations.
• Prepare detailed security assessment reports with evidence and actions.
• Collaborate with development teams to validate remediation of vulnerabilities.
• Provide guidance on secure architecture and SDLC best practices.
• Support vulnerability management activities and remediation tracking.
• Partner with stakeholders to embed security throughout the SDLC.
• Participate in security reviews, threat assessments, and risk evaluations.

Skills

DAST

Manual Penetration Testing

SAST

Job description

Security QA Engineer/ Security Tester, Remote, , US

Security Tester

Required Skills:

• Dynamic App Security Testing (DAST): Advanced
• Penetration Testing - Manual: Advanced
• Static App Security Testing (SAST): Advanced

Preferred Skills:

• Certifications like CEH, OSCP are preferred but not mandatory

Responsibilities:

• Perform manual and automated web application security assessments to identify security weaknesses and validate application resilience.
• Conduct Dynamic Application Security Testing (DAST) and Static Application Security Testing (SAST) using industry-standard security tools and methodologies.
• Execute secure code reviews across modern application frameworks and technologies to identify coding vulnerabilities and security gaps.
• Analyze, validate, reproduce, and document security vulnerabilities while eliminating false positives.
• Assess security findings, determine risk ratings and business impact, and provide practical remediation recommendations.
• Prepare detailed security assessment reports, including findings, proof‑of‑concept evidence, risk assessments, and corrective actions.
• Collaborate with development teams to review, validate, and verify remediation of identified vulnerabilities.
• Provide guidance on secure application architecture, design principles, and secure software development best practices.
• Support vulnerability management activities, including tracking, prioritization, and remediation of security issues.
• Partner with developers, architects, and project stakeholders to integrate security throughout the Software Development Lifecycle (SDLC).
• Participate in security reviews, threat assessments, and application risk evaluations to strengthen overall application security posture.
• Contribute to continuous improvement of application security processes, standards, and testing methodologies.

Expected Deliverable(s): Security Testing Report

Benefits at IntelliBee

• Long-Term Stability: Join us on a multi-year opportunities with room to grow.
• Comprehensive Health Coverage: Access quality healthcare benefits to keep you and your family well.
• Future Planning: Enroll in our 401(k) program and invest in your financial security.
• GC Assistance: We support immediate Green Card processing, if required.