Senior Application Security & Penetration Tester

Agadia Systems; Littleton (NJ); On-site; USD 110,000 - 125,000; Full time

Benefits offered by this job

Medical benefits

Dental benefits

Vision benefits

Life Insurance

401(k)

PTO

Job summary

Agadia Systems is seeking an experienced Application Security and Penetration Testing Engineer to strengthen the security of enterprise web applications, APIs, and services. The role combines automated and manual testing, vulnerability validation, and remediation verification within healthcare data security context.

The ideal candidate will have hands-on penetration testing expertise, knowledge of secure software development, and the ability to communicate findings to technical and leadership

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or related discipline, or equivalent professional experience.
• Five or more years of information security experience, including at least three years of hands‑on web application and API penetration testing.
• Strong knowledge of the OWASP Top 10, OWASP API Security Top 10, CWE, CVSS, and common application attack techniques.
• Hands‑on experience with Burp Suite Pro, OWASP ZAP, Invicti, or comparable DAST platforms.
• Experience testing authentication, authorization, session management, APIs, and business logic.

Responsibilities

• Conduct security assessments of web applications, APIs, and related services using automated vulnerability-scanning and DAST tools.
• Perform manual penetration testing to identify vulnerabilities automated tools may miss.
• Test authentication, authorization, session management, access controls, input validation, APIs, and business logic.
• Identify issues such as broken access control, injection vulnerabilities, XSS, insecure configurations, information exposure, and privilege escalation.
• Validate automated findings, eliminate false positives, and determine exploitability and business impact.
• Document findings with evidence, severity, risk, business impact, and remediation recommendations.
• Collaborate with development and architecture teams to review findings and recommend corrective actions.
• Retest remediated vulnerabilities and confirm closure.
• Support secure design reviews, threat modeling, code reviews, and release-readiness assessments.
• Help integrate application security testing into SDLC and CI/CD pipelines.
• Maintain vulnerability status, remediation timelines, risk exceptions, and assessment reports.
• Support internal audits and customer security reviews.

Skills

Penetration testing

Web security

Secure SDLC

OWASP Top 10

Vulnerability assessment

Communication skills

Education

Bachelor's degree in CS/Cybersecurity/IT

Tools

Burp Suite Pro

OWASP ZAP

Invicti

DAST tools

Job description

Agadia Systems is seeking an experienced Application Security and Penetration Testing Engineer to strengthen the security of enterprise web applications, APIs, and services. The role combines automated and manual testing, vulnerability validation, and remediation verification within healthcare data security context.

The ideal candidate will have hands-on penetration testing expertise, knowledge of secure software development, and the ability to communicate findings to technical and leadership