Sr. Web Application Penetration Tester

The Hartford; Connecticut; Remote; USD 127,000 - 191,000; Full time

Job summary

An innovative insurance company is seeking a Senior Web Application Penetration Tester to enhance its cybersecurity defenses. This role offers the chance to lead penetration testing initiatives, collaborating with application teams to address vulnerabilities effectively. The position is fully remote, providing flexibility while working on critical security assessments that impact a wide range of applications. Join a high-performing team dedicated to improving the security posture of the organization, where your expertise will drive meaningful change and contribute to a safer digital environment.

Qualifications

• 5+ years of experience in application security assessments.
• Strong understanding of web and mobile architectures.

Responsibilities

• Plan and perform penetration tests across enterprise applications.
• Document findings and recommend remediation strategies.

Skills

Application Penetration Testing

Vulnerability Assessment

Web and Mobile Application Security

Reporting and Communication

Legal and Ethical Standards

Education

Bachelor's Degree in Computer Science

Certifications (CISSP, OSCP, OSWE)

Job description

Join to apply for the Sr. Web Application Penetration Tester role at The Hartford

3 days ago Be among the first 25 applicants

Join to apply for the Sr. Web Application Penetration Tester role at The Hartford

Senior Security Engineer - IS07FE

We’re determined to make a difference and are proud to be an insurance company that goes well beyond coverages and policies. Working here means having every opportunity to achieve your goals – and to help others accomplish theirs, too. Join our team as we help shape the future.

The Hartford’s Information Protection (THIP) organization is looking for a talented individual to join a high-performing team of Application Security Engineers responsible for governing, managing and delivering our company’s application cybersecurity defenses. As a Senior Web Application Penetration Tester, you will have an opportunity to shape the direction of our company’s application penetration testing program by providing thought leadership, professional support, and valued contributions to our growing range of penetration testing activities. This role provides the right person with the opportunity to use their skills and expertise to drive meaningful improvements into the security posture of all application portfolios across our company.

Responsibilities

• Plan and perform penetration tests on applications spanning all enterprise lines of business and portfolios
• Document findings and recommend remediation strategies
• Collaborate with application teams to ensure vulnerabilities are addressed effectively
• Develop exploits to demonstrate the potential impact of a successful attack
• Participate in broader attack simulation activities assessing systems including infrastructure, network, cloud, and IoT services
• Stay up to date with the latest technologies, testing methodologies, tools, security trends and threats
  
  

This role is eligible for fully remote work.

Qualifications

Candidates will be evaluated based on their ability to perform the duties listed above while demonstrating the skills and competencies necessary to be highly effective in the role. These skills and competencies include:

• 5+ years’ experience assessing vulnerabilities across a large enterprise application portfolio
• 3+ years’ experience performing application penetration testing to cover a broad range of enterprise web and mobile applications
• Strong understanding of web and mobile architectures and technologies including Single Page Applications (SPA), Multi-Page Applications (MPA), APIs, OAuth 2.0, JavaScript, Java and .NET frameworks
• Comprehensive knowledge of web and mobile application security vulnerabilities including OWASP Web Application, API and Mobile Top 10 lists
• Ability to effectively extend testing scope to include infrastructure, network, cloud and IoT services
• Strong reporting and communication skills
• Strong commitment to legal and ethical standards and behaviors
• Bachelor's degree from an accredited college or university in computer science, information security, or related field
• Certifications such as Certified Information Systems Security Professional (CISSP), Offensive Security Certified Professional (OSCP) or Offensive Security Web Expert (OSWE) are highly desirable and preferred
  
  

Candidate must be authorized to work in the US without company sponsorship. The company will not support the STEM OPT I-983 Training Plan endorsement for this position.

Compensation

The listed annualized base pay range is primarily based on analysis of similar positions in the external market. Actual base pay could vary and may be above or below the listed range based on factors including but not limited to performance, proficiency and demonstration of competencies required for the role. The base pay is just one component of The Hartford’s total compensation package for employees. Other rewards may include short-term or annual bonuses, long-term incentives, and on-the-spot recognition. The annualized base pay range for this role is:

$127,200 - $190,800

Equal Opportunity Employer/Sex/Race/Color/Veterans/Disability/Sexual Orientation/Gender Identity or Expression/Religion/Age

About Us | Culture & Employee Insights | Diversity, Equity and Inclusion | Benefits

Seniority level

• Seniority level

  Mid-Senior level

Employment type

• Employment type

  Full-time

Job function

• Job function

  Information Technology

Referrals increase your chances of interviewing at The Hartford by 2x

Get notified about new Penetration Tester jobs in Connecticut, United States.

Application Security Engineer (Mobile/Network/OSCP)

Senior Penetration Tester – Application Req 701

Connecticut, United States $129,000.00-$135,000.00 1 week ago

Hartford, CT $127,200.00-$190,800.00 2 months ago

IT Services Sourcing (Managed D&A, Security, or Gen AI Outsourcing) - Sr Director Analyst (Remote - US)

Stamford, CT $152,000.00-$190,000.00 2 weeks ago

Cyber Security Engineer - PAM Administrator

Senior Principal, Gartner Analyst AI and Cybersercurity

Stamford, CT $105,000.00-$140,000.00 2 weeks ago

Senior Director Analyst, Security Architecture and Cloud Security (Remote North America)

Sr Director Analyst - Data Security Product Manager (Remote North America)

Sr. Threat Hunting Intelligence Analyst (Remote - East Coast)

We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.