Senior Web & API Security Pen Tester

ASM Research, An Accenture Federal Services Company; Providence (RI); On-site; USD 110,000 - 137,000; Full time

Job summary

ASM Research, An Accenture Federal Services Company, is seeking an Application Security Penetration Tester to safeguard web applications and REST APIs. The role emphasizes hands-on testing, risk assessment, and remediation guidance.

Proficiency with BurpSuite Pro, strong knowledge of OWASP Top 10 and SANS 25, and experience integrating security within CI/CD are essential for success in this position.

Qualifications

• 3 years of secure code review experience in Scala/Java/JavaScript/Spring.
• 3 years of SAST/DAST experience.
• 3+ years of manual pen testing Web Apps and REST APIs with BurpSuite Pro.
• Deep knowledge of secure coding and DevSecOps.
• OWASP Top 10 and SANS 25 proficiency.
• CI/CD, AWS security, Jenkins and GitHub familiarity.

Responsibilities

• Bridge between development teams and stakeholders to clarify security requirements.
• Define and enforce application security best practices.
• Perform security assessments of Java/Scala apps and REST APIs.
• Analyze SAST/DAST/SCA reports and provide remediation guidance.
• Conduct security reviews of software architecture and design.
• Write comprehensive assessment reports with actionable findings.

Skills

Security liaison

Security best practices

OWASP Top 10

SANS 25

Third-party security

Dependency analysis

Code review

SAST/DAST/SCA analysis

Static/Dynamic testing

Penetration testing

Security architecture reviews

Reporting & remediation

CI/CD scripting

Education

GPEN, GWAPT, OSCP, CompTIA PenTest

Tools

BurpSuite Pro

Postman/Bruno

Job description

ASM Research, An Accenture Federal Services Company, is seeking an Application Security Penetration Tester to safeguard web applications and REST APIs. The role emphasizes hands-on testing, risk assessment, and remediation guidance.

Proficiency with BurpSuite Pro, strong knowledge of OWASP Top 10 and SANS 25, and experience integrating security within CI/CD are essential for success in this position.