Web App Penetration Tester | Security Assessment Expert

Ampcus Inc; Chantilly (VA); On-site; USD 120,000 - 160,000; Full time

Job summary

Ampcus Inc. is seeking an experienced Web Application Penetration Tester to support comprehensive security assessments of web applications, APIs, and networks.

The role requires thinking like an attacker, assessing holistically, and delivering actionable insights to enhance security of government systems. Ideal candidates have in-depth knowledge of security vulnerabilities, testing methodologies, and the ability to communicate findings with technical and executive audiences.

Qualifications

• Bachelor’s degree in computer science, cybersecurity, information technology, or related field (or equivalent).
• 7+ years of penetration testing experience with emphasis on web apps and APIs.
• Knowledge of web technologies, networking, authentication, and encryption standards.
• Strong understanding of secure development practices (SDLC) and OWASP Top 10.
• Excellent analytical, documentation, and communication skills.

Responsibilities

• Conduct web application, API, and network penetration tests to identify vulnerabilities.
• Perform grey-box and black-box testing following NIST SP 800-115 and OWASP Testing Framework.
• Evaluate authentication, session management, access controls, and data handling for flaws.
• Execute vulnerability exploitation and proof-of-concept validation to show risk impact.
• Document findings with precise remediation recommendations for stakeholders.
• Collaborate with internal security engineers and client teams to verify fixes and retest.
• Prepare comprehensive technical and executive reports that align with SEC530.
• Support secure configuration reviews and compliance with cybersecurity standards.

Skills

Web technologies

Networking protocols

Authentication systems

Encryption standards

Secure SDLC

OWASP Top 10

Analytical skills

Documentation

Communication skills

Education

Bachelor’s degree in Computer Science / Cybersecurity

Tools

NIST SP 800-115

OWASP Testing Framework

Job description

Ampcus Inc. is seeking an experienced Web Application Penetration Tester to support comprehensive security assessments of web applications, APIs, and networks.

The role requires thinking like an attacker, assessing holistically, and delivering actionable insights to enhance security of government systems. Ideal candidates have in-depth knowledge of security vulnerabilities, testing methodologies, and the ability to communicate findings with technical and executive audiences.