Job details
Job type full-time number of hires for this role on-going need to fill this role
Full job description
About the role:
Bsi is hiring a senior web application penetration testerThis regular, full-time position is a great opportunity for someone with strong web application penetration testing skills who would like to work on a variety of interesting projectsThis position focuses primarily on web application penetration testing; however, opportunities may be available to perform iot testing, network penetration testing, red team engagements, social engineering, and physical penetration testing.
We have plenty of exciting projects to work on, including security assessments of web applications, execution of social engineering campaigns, and even physical security assessmentsThis is an opportunity for a team player who would like to work with a world-class group, is ready to get started quickly, and is eager to learn new skills and have fun while doing so.
Senior web application penetration tester responsibilities:
Understanding of web application security (including but not limited to owasp top ten)
Conducting all types of web application penetration testing, vulnerability assessments, and architecture reviews
Writing a formal security assessment report for each penetration test using our company’s standard reporting format
Participating in conference calls with clients to review your assessment results and consult with the clients on remediation options
Retesting security vulnerabilities that have been fixed and republishing your report to indicate the results of retesting
Assisting with security assessment and reporting methodology enhancements
Performing security research on topics that interest you and publishing content to contribute to the information security community
Education/qualifications:
The ideal candidate will possess at least 5 years of experience performing penetration tests, including familiarity experience with two or more of the following:
Network penetration testing and security fundamentals
Vulnerability assessments
Mobile application penetration testing and security fundamentals (ios/android)
Secure source code review / static analysis (manual and/or automated)
Iot penetration testing and security fundamentals
Social engineering campaigns
Physical penetration testing
Secure software development and architecture
Scripting/coding
Knowledge of industry compliance standards and regulations (pci, hipaa, etc.)
Experience in blue team roles: system/network administration, developer, security engineer, or equivalent
What we offer:
Bsi offers a competitive salary, group-sponsored health and dental, short-term and long-term disability, a company-matched 401k plan, company paid life insurance, 11 paid holidays and 4 weeks paid time off.
Our excellence behaviours: client-centric, agile, collaborativeThese three behaviours represent how we do things at bsiThey help us ensure that bsi is a great place to work and a highly successful business.
Bsi is an equal opportunity employer and we are committed to diversity.
Bsi is conducting face-to-face interviews where appropriate and possibleIf you are invited to a face-to-face interview but feel more comfortable with conducting the interview virtually, please speak to a member of our recruitment team.
Job type: full-time
Salary: from $0.10 per hour
Work remotely:
Yes