Senior Penetration Tester (WebApp and Network) Featured

Kaizen Lab Inc.; North Carolina; Remote; USD 80,000 - 130,000; Full time

Job summary

An innovative cybersecurity firm is on the lookout for a Senior Penetration Tester to join their dynamic team. This exciting role involves simulating cyber attacks on web applications and networks to identify vulnerabilities before they can be exploited. You will leverage your analytical skills and technical expertise to conduct thorough penetration tests, utilizing a variety of tools and methodologies. As a key player in enhancing security measures, you will collaborate with development teams and stay updated on the latest threats. If you are a problem-solver with a passion for cybersecurity and want to make a significant impact, this is the perfect opportunity for you.

Qualifications

• 5+ years of experience in penetration testing and cybersecurity.
• Industry certifications like CEH, OSCP, or GWAPT are required.

Responsibilities

• Conduct thorough penetration tests on web applications.
• Prepare detailed reports on findings and provide security recommendations.

Skills

Penetration Testing

SQL Injection

Cross-Site Scripting (XSS)

Burp Suite

OWASP ZAP

Metasploit

SQLMap

Analytical Skills

Communication Skills

Network Security

Education

Bachelor’s degree in Computer Science

Bachelor’s degree in Information Security

Tools

Burp Suite

OWASP ZAP

Metasploit

SQLMap

Job description

Senior Penetration Tester (WebApp and Network)

Rapid Strategy is seeking a Senior Penetration Test Consultant for both web apps and network. Rapid Strategy is an award-winning and African-American owned small business providing cybersecurity services to the private and public sector. Based in Charlotte, NC, we support our clients across the North Carolina and DMV area. You can learn more about Rapid Strategy at www.RapidStrategy.io.

The primary objective of the Penetration Tester is to simulate cyber attacks on web applications to identify security vulnerabilities before they can be exploited by malicious actors. This role involves a combination of analytical skills, technical expertise, and creativity to simulate real-world hacking scenarios.

Key Responsibilities:

• Conducting thorough penetration tests on web applications to identify vulnerabilities.
• Utilizing various penetration testing tools and methodologies to simulate cyber attacks.
• Analyzing web applications for weaknesses and vulnerabilities using manual and automated methods.
• Understanding and exploiting known web vulnerabilities such as SQL injection, Cross-Site Scripting (XSS), Cross-Site Request Forgery (CSRF), and others.
• Preparing detailed reports on findings and providing recommendations for security improvements.
• Collaborating with development teams to advise on security best practices.
• Keeping abreast of the latest cybersecurity threats and testing methodologies.

Required Skills and Qualifications:

• Bachelor’s degree in Computer Science, Information Security, or a related field.
• 5+ years of experience.
• Industry certifications such as Certified Ethical Hacker (CEH), Offensive Security Certified Professional (OSCP), or GIAC Web Application Penetration Tester (GWAPT).
• Proficiency in using penetration testing tools like Burp Suite, OWASP ZAP, Metasploit, SQLMap, etc.
• Experience with known exploits and their mitigation.
• Ability to analyze and report on penetration testing outcomes effectively.
• Excellent problem-solving and analytical skills.
• Strong communication skills for collaboration with cross-functional teams.
• Knowledge of network security and operating systems.
• Familiarity with cloud environments and container technologies.

This role will be primarily remote but may require travel.

Please note that this position requires applicants to be U.S. citizens and based in the United States. Only individuals who meet these criteria will be considered for employment.

Upload Your Resume: Accepted formats: .pdf, .doc, .docx.