Offensive Security Engineer | Web Application Penetration Testing (Remote)

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by Trace3, so some details may not match this job. The employer's own page has the real description.

Job Overview

The Offensive Security Engineer | Web Application Penetration Testing at Trace3 is responsible for identifying and exploiting vulnerabilities in web applications to enhance security measures for our clients. This role involves conducting thorough penetration tests, providing detailed reports on findings, and collaborating with the development teams to remediate security issues. The successful candidate will utilize their extensive knowledge of web security protocols to ensure the highest level of protection against potential threats, ultimately contributing to the improvement of our clients' security posture.

Job Responsibilities

• Conduct thorough penetration testing on web applications, APIs, and associated services to identify security vulnerabilities.
• Develop and execute detailed test plans, using both automated tools and manual testing techniques.
• Analyze potential security risks and provide actionable recommendations for remediation.
• Prepare and present comprehensive reports on testing outcomes to both technical and non-technical stakeholders.
• Collaborate with development teams to integrate security best practices into the software development lifecycle.
• Stay updated with the latest security trends, vulnerabilities, and exploit techniques.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• 5+ years of experience in offensive security, penetration testing, or a related cybersecurity role.
• Strong understanding of web technologies, including HTTP, HTML, JavaScript, and web application frameworks.
• Proficiency in penetration testing tools such as Burp Suite, OWASP ZAP, and Metasploit.
• Relevant security certifications such as OSCP, CEH, or OWASP certifications are preferred.
• Excellent analytical, troubleshooting, and problem-solving skills.

Technologies & Tools

This position requires proficiency in a variety of technologies and tools critical to web application security assessments. Essential tools include vulnerability scanners, network analysis tools, and web application firewalls. Familiarity with scripting languages such as Python or JavaScript will aid in the automation of testing and reporting processes. Additionally, knowledge of database security practices and secure coding standards will be beneficial in providing holistic security assessments.

Ideal Candidates

The ideal candidate for the Offensive Security Engineer role at Trace3 possesses a strong ethical mindset, demonstrating integrity and professionalism in all engagements. They should be detail-oriented with a passion for cybersecurity and an eagerness to stay ahead of emerging threats. Effective communication skills are essential, enabling collaboration with diverse teams and clear reporting of findings. A proactive approach to problem-solving, along with a commitment to continuous learning, defines a successful candidate in this dynamic environment.