Senior Application Security & Penetration Tester

Agadia; Parsippany-Troy Hills (NJ); Presencial; USD 120.000 - 190.000; Jornada completa

Descripción de la vacante

Agadia is seeking an experienced Application Security and Penetration Testing Engineer to strengthen the security of enterprise web apps and APIs. You will perform automated and manual assessments, validate vulnerabilities, and collaborate with developers to remediate findings.

The ideal candidate combines hands-on testing with a deep understanding of secure software development and healthcare data security requirements, and will contribute to security in the SDLC and CI/CD pipelines.

Formación

• Bachelor’s degree in CS/Cybersecurity/IT or equivalent professional experience.
• 5+ years of information security, including 3+ years of hands-on web app & API testing.
• Strong knowledge of OWASP Top 10, API Top 10, CWE, CVSS, and attack techniques.
• Hands-on with Burp Suite Pro, OWASP ZAP, Invicti or similar DAST tools.
• Experience testing authentication, authorization, sessions, APIs, and business logic.
• Ability to validate findings and distinguish exploitable vulnerabilities from false positives.
• Understanding of HTTP/HTTPS, REST, cookies, tokens, and web app architecture.
• Familiarity with secure coding for .NET/JavaScript apps.
• Ability to communicate vulnerabilities and remediation to technical and leadership teams.
• Strong analytical, documentation, collaboration, and problem-solving skills.

Responsabilidades

• Conduct security assessments of web apps, APIs, and services using automated scanning and DAST.
• Perform manual penetration testing to identify issues not seen by automation.
• Test authentication, authorization, session mgmt, access controls, APIs, and biz logic.
• Identify broken access control, injections, XSS, insecure configurations, exposure, and escalation.
• Validate findings, eliminate false positives, and assess exploitability and bus. impact.
• Document findings with evidence, reproduction steps, severity, risk, and remediation.
• Collaborate with dev/architecture teams to advise corrective actions.
• Retest remediated vulnerabilities and confirm closures.
• Support secure design reviews, threat modeling, code reviews, and release readiness.
• Help integrate security testing into SDLC and CI/CD pipelines.
• Maintain status, timelines, risk exceptions, and assessment reports.
• Support internal audits, customer reviews, and external pen tests.
• Provide security guidance and training for dev and QA teams.
• Stay current with emerging vulnerabilities, attack techniques, tools, and best practices.

Conocimientos

Penetration testing

Threat modeling

Security assessment

Communication

Documentation

CI/CD integration

Educación

Bachelors in CS/Cybersecurity/IT

Herramientas

Burp Suite Pro

OWASP ZAP

Invicti

Descripción del empleo

Agadia is seeking an experienced Application Security and Penetration Testing Engineer to strengthen the security of enterprise web apps and APIs. You will perform automated and manual assessments, validate vulnerabilities, and collaborate with developers to remediate findings.

The ideal candidate combines hands-on testing with a deep understanding of secure software development and healthcare data security requirements, and will contribute to security in the SDLC and CI/CD pipelines.