Senior Web & Mobile Penetration Tester (Remote)

Deer Brook Consulting, Inc.; New Gloucester, Northern (ME, KY); Hybrid; USD 90,000 - 130,000; Full time

Job summary

Deer Brook Consulting, Inc. in New Gloucester, ME, is seeking a Senior Web and Mobile Application Penetration Tester to join our cybersecurity team. The role combines hands-on testing with detailed reporting and remediation guidance for clients.

You will conduct manual and automated pentests on web and mobile apps, follow OWASP Top 10/MASVS guidance, and communicate findings clearly to technical and non-technical stakeholders. Remote or hybrid work options are available.

Qualifications

• 3–5+ years of hands-on experience in penetration testing, with a strong focus on web and mobile applications.
• Expertise in OWASP Top 10, OWASP MASVS, and common API vulnerabilities.
• Proficiency with Burp Suite, OWASP ZAP, MobSF, and Postman.

Responsibilities

• Perform manual and automated penetration tests on web and mobile (iOS/Android) applications.
• Identify, exploit, and document vulnerabilities in line with OWASP Top 10, OWASP MASVS, and other relevant security standards.
• Simulate real-world attacks to assess application and API security posture.
• Produce detailed and executive-level reports with clear risk ratings and remediation steps for clients.
• Validate fixes for previously identified vulnerabilities and regress test for related issues.
• Stay current on the latest attack techniques, vulnerabilities, and industry trends.

Skills

Penetration testing

Web/mobile security

Reverse engineering

Report writing

Auth protocols (OAuth2/JWT/SSO)

Tools

Burp Suite

OWASP ZAP

MobSF

Postman

Job description

Deer Brook Consulting, Inc. in New Gloucester, ME, is seeking a Senior Web and Mobile Application Penetration Tester to join our cybersecurity team. The role combines hands-on testing with detailed reporting and remediation guidance for clients.

You will conduct manual and automated pentests on web and mobile apps, follow OWASP Top 10/MASVS guidance, and communicate findings clearly to technical and non-technical stakeholders. Remote or hybrid work options are available.