Web Application Penetration Tester

Company: The Select Group
Location: Denver
Posted on: April 11, 2021

Job Description:

Job Title: Web Application Penetration TestCompany Name: QualtricsReq Priority: AStart Date: ASAPInterview Process: 1. 30 minute IV with Brett Greenwood (HM) 2. 30 minute with Sr. EngineerInterview Times: 3/19- 2-2:30pm, 2:30-3 pm PSTExclusive: YJob Duration: 6-12 months# of Openings: 1Bill Rate: $83/hrReason for need: Trying to offload existing workProject Details:Looking for a consultant to provide security vulnerability management for the platform security team.Must Haves:* Experience using Burp Suite (penetration testing tool) and Open Source* ZAP (zed attack proxy) is an acceptable alternative to Burp* minimum 2 years professional penetration testing experience,* experience with multiple relevant frameworks and languages: React, Angular, NodeJS, Java, Go, PHP, Python* NodeJS and Java are the most important* Capable of doing code reviews * Experience with Assessment tools to augment testingNice to Have:* Bonus skills: mobile app pentesting (iOS, Android), network pentesting in Linux-based environmentsEducation/Certification Requirements:Additional Details:Responsibilities* Leverage findings from SAST (Checkmarx), DAST (Qualys WAS), IAST (Contrast) and similar assessment tools to augment testing (prefer experience with some of these tools, but not required)* Performs web application penetration testing using Burp suite, open source and other industry-standard tools* File findings in Jira with remediation guidance; provide direct consulting as needed* Code and design reviews* Threat modeling* Make recommendations for architecture & design improvements to address recurring issuesRemote Info: Completely remote- preferably in MST zone

Keywords: The Select Group, Denver , Web Application Penetration Tester, IT / Software / Systems , Denver, Colorado