We have a contract opportunity with one of our major clients. They are looking for a Lead Web Application Penetration Tester- Onsite for an important project.
Position: Lead Web Application Penetration Tester- Onsite
Location: Charlotte , NC, 28105
Duration: Contract : 1+ year
Job Description:
Required Skills:
Strong experience in web application penetration testing
Demonstrated proficiency with Burp Suite and related offensive testing tools.
Solid understanding of the OWASP Top 10 and OWASP API Security Top 10.
Experience testing REST and/or GraphQL APIs.
Strong knowledge of authentication, authorization, cookies, tokens, session management, and modern web architecture.
Excellent report writing, remediation advisory, and communication skills.
Ability to work independently and lead assessments from scoping through delivery.
Knowledge of SAST, DAST, SCA, and API security tooling.
Relevant certifications such as OSCP, OSEP, GWAPT, or equivalent.
Description:
Job Summary:
Advanced Web Application Penetration Tester
Role Summary
We are seeking an experienced Advanced Web Application Penetration Tester to lead security assessments of modern web applications and APIs. This role will focus on uncovering vulnerabilities in application logic, authentication and authorization controls, API endpoints, session handling, and other attack paths commonly targeted in real-world engagements. The ideal candidate is highly skilled in manual testing, has deep experience with tools such as Burp Suite and other OWASP-aligned testing utilities, and can combine automated and human-led techniques to identify high-impact risks
Key Responsibilities
Lead and execute advanced penetration tests against web applications, APIs, and related services.
Test complex business workflows such as user onboarding, checkout/cart flows, account recovery, role escalation, payment actions, and transaction handling.
Perform manual and automated testing using Burp Suite, OWASP tools, and other security testing utilities.
Analyze and attack API security issues, including object-level authorization, function-level authorization, mass assignment, excessive data exposure, and broken object references.
Identify weaknesses in rate limiting, input validation, error handling, file upload processing, and trust boundaries.
Perform reconnaissance and application mapping to identify endpoints, parameters, hidden functionality, and exposed surfaces.
Enumerate and test user roles, permissions, and privilege boundaries.
Probe for broken session management, token handling issues, and weak logout / session invalidation behavior.
Test input handling for client-side and server-side validation issues, including edge cases and error-based disclosures.
Provide remediation advisory to application owners, developers, and security stakeholders on how to address identified findings.
Required Qualifications:
Strong experience in web application penetration testing
Demonstrated proficiency with Burp Suite and related offensive testing tools.
Solid understanding of the OWASP Top 10 and OWASP API Security Top 10.
Experience testing REST and/or GraphQL APIs.
Strong knowledge of authentication, authorization, cookies, tokens, session management, and modern web architecture.
Excellent report writing, remediation advisory, and communication skills.
Ability to work independently and lead assessments from scoping through delivery.
Knowledge of SAST, DAST, SCA, and API security tooling.
Relevant certifications such as OSCP, OSEP, GWAPT, or equivalent.
...development Wellness resources Location: Roselle, NJ (Hybrid Tutoring) Posted: January 24, 2026 Type: Part-Time GED... ...computer or laptop for virtual instruction. Available for weekend, afternoon, and/or evening sessions. Ability to pass a...
The RoleWe are looking for an SEO Manager to join our growing team at Wpromote! Our ideal candidate will have a passion for establishing strong relationships with their clients (3-5), a natural curiosity for website optimization, and a knack for being proactive in pursuing...
...Job Description Job Description Primary Care Physicians needed in Washington AB Staffing Solutions is seeking an experiencedPrimary... ...per week.1099 Compensation: Weekly Pay: negotiable. Travel & Lodging Included. Malpractice Insurance Covered....
...Responsibilities Position Summary Responsible for designing, developing, and maintaining engaging learning solutions that support... ...and performance. Delivers accurate, high-quality curriculum within a specified timeline and will work with multiple types...
...maintain the Public and Internal Lab for use by Vertiv channel IT Sales personnel, Vertiv Resellers, and Partners. Provide secondary... ...Performing Live Demonstrations of Vertiv Monitoring and IT Management Software solutions.Assisting Field Sales Engineers and Resellers with...