Web Application Penetration Tester

Seeking a full-time Web Application Penetration Tester who will perform hands-on penetration tests on real customer applications, identify coverage gaps in automated testing, and collaborate with software engineers to enhance product security, all in a remote work environment. Key responsibilities Conduct full-scope web application penetration tests to identify vulnerabilities and attack paths Review and validate NodeZero results, manually reproducing edge cases and building proof-of-concept exploits Collaborate with engineering teams to translate findings into product improvements and maintain a library of test cases Required qualifications Extensive hands-on experience with web application penetration testing Deep knowledge of web vulnerability classes, including SQL injection, XSS, and business-logic flaws Proficiency with proxy tools like Burp Suite and scripting for proof-of-concept exploits Strong technical documentation and communication skills for diverse audiences History of recognized security research and successful bug bounty contributions