Web App Security Penetration Tester

ASM Research, An Accenture Federal Services Company; Dover (DE); On-site; USD 110,000 - 137,000; Full time

Job summary

ASM Research, An Accenture Federal Services Company seeks an Application Security Penetration Tester to safeguard web applications and REST APIs in a federal environment. You will apply OWASP Top 10 and SANS 25 to identify and mitigate vulnerabilities, performing automated and manual reviews with detailed remediation recommendations.

You will bridge security with development teams, define security best practices, and integrate security into CI/CD.

Qualifications

• Understand OWASP Top 10 and SANS 25 frameworks.
• Perform security assessments of libraries and dependencies.
• Review Java/Scala applications for CSRF, XSS, SQL injection, and privilege escalation.
• Analyze SAST/DAST/SCA scan reports and provide remediation recommendations.
• Conduct static, dynamic, and penetration testing of Web Apps and REST APIs.
• Write comprehensive reports detailing findings and recommendations.
• Bridge security requirements between development teams and stakeholders.
• Define and enforce application security best practices.
• Knowledge of CI/CD to integrate security tools into DevOps.
• Pursue certifications such as GPEN/GWAPT/OSCP/PenTest as desired.

Responsibilities

• Perform third‑party libraries security assessments and dependency analysis.
• Conduct vulnerability assessments and manual/automatic code reviews.
• Identify issues (CSRF, XSS, SQLi, Privilege Escalation) and propose remediation.
• Analyze multi-tool scan reports and advise on remediation across languages.
• Conduct static, dynamic, and penetration testing of Web Apps and REST APIs.
• Contribute to security architecture and design reviews.
• Write assessment reports with findings and remediation steps.
• Engage with application owners to demonstrate vulnerabilities and solutions.
• Support DevOps by integrating security tools into CI/CD processes.

Skills

Security requirements

Security best practices

OWASP Top 10

SANS 25

Dependency analysis

Code review

CI/CD security

DevSecOps

Vulnerability assessment

Reporting findings

Tools

BurpSuite Pro

Postman

Bruno

Jenkins

GitHub

SAST tools

DAST tools

SCA tools

Developer CI/CD tools

AWS

Job description

ASM Research, An Accenture Federal Services Company seeks an Application Security Penetration Tester to safeguard web applications and REST APIs in a federal environment. You will apply OWASP Top 10 and SANS 25 to identify and mitigate vulnerabilities, performing automated and manual reviews with detailed remediation recommendations.

You will bridge security with development teams, define security best practices, and integrate security into CI/CD.