Senior Web App Security Penetration Tester

ASM Research, An Accenture Federal Services Company; Juneau (AK); On-site; USD 110,000 - 137,000; Full time

Job summary

ASM Research, An Accenture Federal Services Company is seeking an Application Security Penetration Tester to safeguard web applications and REST APIs. Proficiency in BurpSuite Pro, OWASP Top 10, and SANS 25 is essential, with strong communication to bridge development teams and stakeholders.

Responsibilities include third-party library assessments, code reviews, vulnerability identification (CSRF, XSS, SQLi, privilege escalation), and providing actionable remediation guidance.

Qualifications

• 3+ years in secure code review for Scala, Java, JavaScript, Spring Framework.
• 3+ years with SAST/DAST.
• 3+ years manual penetration testing of web apps & REST APIs using BurpSuite Pro & Postman/Bruno.
• Deep knowledge of Secure Coding and DevSecOps principles.
• Proficiency with OWASP Top 10 and SANS 25.

Responsibilities

• Liaise between development teams and stakeholders to define security requirements.
• Define, maintain, and enforce application security best practices.
• Deep understanding of OWASP Top 10, SANS 25.

Skills

Security requirements liaison

Security best practices

OWASP Top 10 & SANS 25

Dependency analysis

Vulnerability remediation guidance

CI/CD security integration

Security testing (static/dynamic/pen)

Security reports writing

Vulnerability demonstration to owners

Scripting for automation

Tools

BurpSuite Pro

Postman

Bruno

Job description

ASM Research, An Accenture Federal Services Company is seeking an Application Security Penetration Tester to safeguard web applications and REST APIs. Proficiency in BurpSuite Pro, OWASP Top 10, and SANS 25 is essential, with strong communication to bridge development teams and stakeholders.

Responsibilities include third-party library assessments, code reviews, vulnerability identification (CSRF, XSS, SQLi, privilege escalation), and providing actionable remediation guidance.