Senior Security Engineer - Web Apps & API Pen Testing

Randstad USA; Minneapolis (MN); On-site; USD 124,000 - 128,000; Part time

Job summary

Randstad Digital in Minnesota is seeking a Security Engineer to join our enterprise cybersecurity team. You will perform end-to-end penetration testing and threat analysis on web applications and APIs, collaborating with engineering teams to identify vulnerabilities and develop automation tools.

This contract role requires a Bachelor's degree and 5+ years of security testing experience with Burp Suite and Nmap; Python or Go scripting; OSCP/CISSP preferred.

Qualifications

• Bachelor''s degree required; 7+ years in cybersecurity.
• 5+ years of hands-on penetration testing experience targeting web apps & APIs.

Responsibilities

• Execute end-to-end penetration tests covering scoping, exploitation, validation, and reporting for web applications and APIs.
• Identify web application vulnerabilities such as OWASP Top 10, injection attacks, and authentication/authorization flaws.
• Utilize advanced security testing tools, including Burp Suite, Nmap, and common exploitation frameworks.
• Write custom scripts and automations in Python or Go to streamline security testing workflows.
• Partner directly with engineering teams to validate security findings and provide actionable remediation guidance.
• Document comprehensive technical findings and support threat modeling to identify risk areas pre-deployment.

Skills

Penetration testing

Python

Go

Security tooling

Education

Bachelor''s degree in Computer Science, Cybersecurity, or equivalent practical experience

Tools

Burp Suite

Nmap

Job description

Randstad Digital in Minnesota is seeking a Security Engineer to join our enterprise cybersecurity team. You will perform end-to-end penetration testing and threat analysis on web applications and APIs, collaborating with engineering teams to identify vulnerabilities and develop automation tools.

This contract role requires a Bachelor's degree and 5+ years of security testing experience with Burp Suite and Nmap; Python or Go scripting; OSCP/CISSP preferred.