Senior Web App & API Penetration Engineer

Horizontal Talent; Brooklyn Park (MN); On-site; USD 120,000 - 160,000; Full time

Job summary

Horizontal Talent is seeking an experienced security engineer to lead end-to-end penetration testing of web applications and APIs in an enterprise environment. You will partner with engineering teams, communicate clear findings, and provide practical remediation guidance.

Responsibilities include planning tests, leveraging Burp Suite and Nmap, scripting in Python or Go, and mentoring peers as part of a broader security program. This on-site role in Minnesota offers growth in a dynamic team.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, or equivalent practical experience.
• 7+ years in cybersecurity with increasing responsibility in penetration testing.
• Experience performing full penetration tests on web applications and APIs.

Responsibilities

• Plan and execute penetration tests from scoping through exploitation, validation, and reporting.
• Assess web applications and APIs for vulnerabilities, including authentication, authorization, and injection issues.
• Use industry-standard testing tools such as Burp Suite and Nmap to identify and verify risks.
• Create clear, actionable documentation that helps engineering teams understand and remediate findings.
• Collaborate with technical teams to validate fixes and support remediation efforts.
• Develop scripts or lightweight automation in Python or Go to improve testing workflows.
• Contribute to security efforts across mobile, hardware/embedded systems, or third-party platforms when applicable.
• Support risk identification through threat modeling and pre-deployment review activities.

Skills

Penetration testing

Web app security

Burp Suite

Nmap

Python or Go scripting

Documentation & reporting

Collaborative work with engineering

Education

Bachelor’s degree in Computer Science/Cybersecurity or equivalent

Tools

Burp Suite

Nmap

Job description

Horizontal Talent is seeking an experienced security engineer to lead end-to-end penetration testing of web applications and APIs in an enterprise environment. You will partner with engineering teams, communicate clear findings, and provide practical remediation guidance.

Responsibilities include planning tests, leveraging Burp Suite and Nmap, scripting in Python or Go, and mentoring peers as part of a broader security program. This on-site role in Minnesota offers growth in a dynamic team.