Senior App Security & Penetration Tester

Agadia; Parsippany-Troy Hills (NJ); On-site; USD 120,000 - 180,000; Full time

Job summary

RXinsider LTD. in Parsippany, NJ seeks an experienced Application Security and Penetration Testing Engineer to strengthen security of enterprise web apps and APIs.

You will perform automated and manual assessments, validate findings, and collaborate with development teams to verify remediation across the software lifecycle. The ideal candidate brings hands-on pentesting expertise, solid knowledge of OWASP Top 10 and API security, and the ability to communicate risks to technical and leadership

Qualifications

• Bachelor’s degree in a related field or equivalent professional experience.
• 5+ years in information security with hands-on web app and API testing.
• Strong knowledge of OWASP Top 10, API Top 10, CWE, CVSS and attack techniques.
• Experience with Burp Suite Pro, OWASP ZAP, Invicti or similar tools.
• Ability to validate findings and distinguish exploitable vulnerabilities from false positives.
• Clear communication of vulnerabilities, business impact, and remediation guidance.

Responsibilities

• Conduct security assessments of web apps, APIs, and related services using automated vulnerability-scanning and manual testing.
• Test authentication, authorization, session management, APIs, and business logic.
• Validate findings, document evidence, severity, and remediation recommendations.
• Collaborate with development/architecture teams to remediate vulnerabilities and retest.
• Support secure design reviews, threat modeling, code reviews, and CI/CD integration.
• Provide application security guidance and knowledge sharing for teams.

Skills

Burp Suite Professional

OWASP Top 10

OWASP API Security Top 10

DAST Tools

Web API security testing

Authentication & Authorization testing

Secure coding practices (.NET, Java/JS

Communication of vulnerabilities

Education

Bachelor's degree or equivalent

Tools

Burp Suite Pro

OWASP ZAP

Invicti

Job description

RXinsider LTD. in Parsippany, NJ seeks an experienced Application Security and Penetration Testing Engineer to strengthen security of enterprise web apps and APIs.

You will perform automated and manual assessments, validate findings, and collaborate with development teams to verify remediation across the software lifecycle. The ideal candidate brings hands-on pentesting expertise, solid knowledge of OWASP Top 10 and API security, and the ability to communicate risks to technical and leadership