Web Application Penetration Tester – Technical Lead (In Office or Remote)

Talentify.io; United States; Remote; USD 150,000 - 224,000; Full time

Job summary

A leading company in housing finance is seeking an experienced web application penetration tester. This role involves leading security assessments, mentoring team members, and enhancing security practices. The ideal candidate will have extensive experience in identifying vulnerabilities and a strong understanding of web technologies. Join a collaborative environment focused on making housing more accessible while enjoying a competitive salary and benefits.

Benefits

Comprehensive total rewards package

Annual incentive program

Mentorship opportunities

Qualifications

• 8-10 years of experience in web application penetration testing.
• Technical certifications like OSWA, OSWE, eWPTX.

Responsibilities

• Lead web application penetration assessments and provide tailored remediations.
• Search for vulnerabilities in web applications and cloud environments.
• Mentor less experienced team members.

Skills

Web Application Security

Vulnerability Assessment

Mentorship

Education

Technical Certifications

Tools

Burp Suite

Python

JavaScript

Job description

Employer Industry: Housing Finance

Why consider this job opportunity:
- Salary up to $224,000
- Opportunity to participate in an annual incentive program
- Comprehensive total rewards package including competitive compensation and market-leading benefits
- Chance to contribute to making homeownership and rental housing more accessible and affordable across the nation
- Collaborative work environment with opportunities for mentorship and professional development
- Engage in innovative security practices and contribute to the overall strength of the organization's defenses

What to Expect (Job Responsibilities):
- Lead and perform web application penetration assessments, collaborating with stakeholders to scope engagements and provide tailored remediations
- Proactively search for vulnerabilities in web applications, web APIs, and cloud environments
- Work with other Red Team members to integrate web application security into broader threat emulation scenarios
- Develop and maintain scripts, tools, and methodologies to enhance processes and capabilities
- Provide mentorship and technical guidance to less experienced team members

What is Required (Qualifications):
- 8-10 years of relevant experience in web application penetration testing
- One or more technical certifications: OSWA, OSWE, Burp Suite Certified Practitioner, eWPT, eWPTX
- Ability to critically examine web applications to identify, exploit, and remediate vulnerabilities
- Solid understanding of related web technologies and infrastructure
- In-depth knowledge of secure development practices and security frameworks

How to Stand Out (Preferred Qualifications):
- Experience with web-related public research (advisories, disclosures)
- Previous Bug Bounty or vulnerability disclosure experience
- Proficiency in at least one scripting or programming language (Python, JavaScript, C#, Java)

#HousingFinance #InformationSecurity #PenetrationTesting #CareerOpportunity #CompetitivePay

We prioritize candidate privacy and champion equal-opportunity employment. Central to our mission is our partnership with companies that share this commitment. We aim to foster a fair, transparent, and secure hiring environment for all. If you encounter any employer not adhering to these principles, please bring it to our attention immediately.
We are not the EOR (Employer of Record) for this position. Our role in this specific opportunity is to connect outstanding candidates with a top-tier employer.