Senior Application Penetration Tester (Federal Health Program Security)

dunhill professional search & government solutions • United State

Remote

Apply Now

AI Summary

Lead application security testing for a federal health program, identifying vulnerabilities in web apps and REST APIs using BurpSuite, SAST/DAST tools, and manual penetration testing. Bridge security requirements between development teams and stakeholders while automating security tools in DevOps CI/CD pipelines. Requires 3+ years of hands-on experience in secure code review, penetration testing, and DevSecOps principles.

Key Highlights

Fully remote role safeguarding federal health program applications with 3+ years of penetration testing experience

Focus on OWASP Top 10, SANS 25, and secure coding best practices for Java/Scala applications

Automate security tools in CI/CD pipelines and liaise between developers, security teams, and stakeholders

Key Responsibilities

Conduct vulnerability assessments and secure code reviews for Java/Scala applications to identify CSRF, XSS, SQL injection, and privilege escalation risks

Serve as a security liaison between development teams and stakeholders to define and enforce application security best practices

Automate security tools in DevOps CI/CD pipelines and integrate SAST/DAST/SCA findings into DevSecOps workflows

Interested in remote work opportunities in QA & Testing? Discover QA & Testing Remote Jobs featuring exclusive positions from top companies that offer flexible work arrangements.

Technical Skills Required

BurpSuite Static Analysis Security Testing (SAST) & Dynamic Analysis Security Testing (DAST) Java/Scala Secure Code Review

Benefits & Perks

Fully remote work

$109,600 - $137,000 annual compensation

US Citizenship and federal background investigation clearance required

Browse our curated collection of remote jobs across all categories and industries, featuring positions from top companies worldwide.

Nice to Have

GPEN, GWAPT, OSCP, or CompTIA PenTest+ certification

AWS security principles and Jenkins/GitHub expertise

Experience with Postman/Bruno for API testing

Job Description

Dunhill Government Solutions is hiring an Application Penetration Tester to safeguard web applications and REST APIs on a federal health program. Guided by the OWASP Top 10 and SANS 25, you will assess third-party libraries and dependencies, run automated and manual code reviews, uncover vulnerabilities such as CSRF, XSS, SQL injection and privilege escalation, and recommend remediation. You will use BurpSuite as your primary instrument for dynamic and penetration testing, write comprehensive findings reports, act as a bridge between development teams and stakeholders on security requirements, and integrate and automate security tools within DevOps CI/CD processes. This is a fully remote (telework) role.

Want the full job description? Read the complete details on LinkedIn, the original posting.

Continue on LinkedIn

This is a short excerpt. All rights to the full description belong to its original publisher.