Web App Security & Penetration Testing Lead

Liberty University; Lynchburg (VA); Hybrid; USD 75,000 - 100,000; Full time

Benefits offered by this job

Health insurance

Retirement plans

Tuition assistance

Job summary

Liberty University seeks an security architect to provide expertise in secure design, testing strategy, and risk mitigation for both web and internal applications. You will perform advanced penetration testing, standardize methodologies, and communicate findings to developers.

You will lead scoping sessions, remediate issues with teams, and stay current on emerging threats and controls to strengthen the university's security posture.

Qualifications

• Bachelor's degree in Computer Science, Information Security, Information Systems, or related field.
• 3-5 years' relevant security experience with at least one of JavaScript, HTML, Python, Java, C#, PowerShell; experience with another is required.
• Experience with penetration testing tools, SIEM, WAF, WAS, DNS security, DLP, EDR, SOAR, IPS/IDS.

Responsibilities

• Provide security architecture expertise to design monitoring solutions and protect networks and systems.
• Perform advanced manual and automated web application penetration testing on internal apps.
• Standardize testing methods, documentation, workflows, and reporting templates.
• Lead pre-engagement scoping sessions and communicate findings to developers.
• Remediate issues with development teams, track fixes, and ensure proper closure of vulnerabilities.
• Stay current on exploits and defensive controls; support investigations and remediation.
• Provide strategic guidance to design solutions addressing security gaps.

Skills

JavaScript

HTML

Python

Java

C#

PowerShell

Education

Bachelor's degree in Computer Science / Information Security

Tools

Burp Suite

Nessus

OWASP ZAP

Metasploit

Splunk (SIEM)

Snort/Suricata (IDS/IPS)

Web Application Firewall (WAF)

EDR tools

SOAR platforms

Job description

Liberty University seeks an security architect to provide expertise in secure design, testing strategy, and risk mitigation for both web and internal applications. You will perform advanced penetration testing, standardize methodologies, and communicate findings to developers.

You will lead scoping sessions, remediate issues with teams, and stay current on emerging threats and controls to strengthen the university's security posture.