Web & API Security Engineer — Pen Test Expert

Cybersecurity Jobs; Parsippany-Troy Hills (NJ); On-site; USD 110,000 - 125,000; Full time

Benefits offered by this job

Medical

Dental

Vision

Life Insurance

401

PTO

Job summary

Agadia Systems Inc seeks an Application Security and Penetration Testing Engineer to strengthen enterprise web application and API security through automated and manual testing, validation, and remediation collaboration.

Responsibilities include security assessments of web apps, APIs, and services; manual penetration testing; testing authentication, authorization, session management, and RBAC; and providing remediation recommendations.

Qualifications

• Bachelor's degree in CS, Cybersecurity, IT, or equivalent experience.
• 5+ years information security with 3+ years web app/API pentesting.
• Know OWASP Top 10, API Top 10, CWE, CVSS; strong testing techniques.
• Experience with Burp Suite Pro, OWASP ZAP, Invicti or similar tools.
• Ability to communicate vulnerabilities and remediation guidance.

Responsibilities

• Conduct security assessments of web apps, APIs, and services using automated scanners and manual testing.
• Perform manual penetration testing to uncover hidden vulnerabilities.
• Test authentication, authorization, session management, RBAC, and API controls.
• Validate findings, document evidence, risk, business impact, and remediation steps.
• Retest remediated issues and support secure SDLC and CI/CD processes.
• Collaborate with development and architecture teams to fix issues.

Skills

Penetration testing

Web security

Threat modeling

Documentation

Communication

Education

Bachelor's degree in CS/Cybersecurity

Tools

Burp Suite Pro

OWASP ZAP

Invicti

DAST tools

Job description

Agadia Systems Inc seeks an Application Security and Penetration Testing Engineer to strengthen enterprise web application and API security through automated and manual testing, validation, and remediation collaboration.

Responsibilities include security assessments of web apps, APIs, and services; manual penetration testing; testing authentication, authorization, session management, and RBAC; and providing remediation recommendations.