Web App & API Security Penetration Tester

ASM Research, An Accenture Federal Services Company; Hartford (CT); On-site; USD 110,000 - 137,000; Full time

Job summary

ASM Research, An Accenture Federal Services Company, is seeking an Application Security Penetration Tester to safeguard web applications and REST APIs by applying OWASP Top 10 and SANS 25 guidance. The role combines manual and automated testing, dependency analysis, and remediation recommendations using BurpSuite Pro.

You will bridge development teams and stakeholders, define secure coding practices, participate in CI/CD security integration, and produce comprehensive security assessment reports

Qualifications

• Secure coding review of Java/Scala apps and frameworks.
• Experience with SAST/DAST and manual penetration testing.
• Knowledge of OWASP Top 10 and SANS 25 security standards.
• Ability to analyze third-party libraries for security issues.
• CI/CD/DevSecOps integration experience and tooling.

Responsibilities

• Perform security assessments of web applications and REST APIs.
• Analyze dependencies and third-party libraries for vulnerabilities.
• Conduct static, dynamic and penetration testing of applications.
• Provide remediation recommendations and detailed reports.
• Bridge development teams and stakeholders to communicate security requirements.
• Integrate security tools within CI/CD pipelines.

Skills

Security requirements

Security best practices

OWASP Top 10

SANS 25

Library security

Vulnerability assessment

Code review Java/Scala

SAST/DAST/SCA

Dynamic testing

CI/CD security

Tools

BurpSuite Pro

Postman

Bruno

Job description

ASM Research, An Accenture Federal Services Company, is seeking an Application Security Penetration Tester to safeguard web applications and REST APIs by applying OWASP Top 10 and SANS 25 guidance. The role combines manual and automated testing, dependency analysis, and remediation recommendations using BurpSuite Pro.

You will bridge development teams and stakeholders, define secure coding practices, participate in CI/CD security integration, and produce comprehensive security assessment reports