Information Technology_USA - USA_Analyst

2 Candidate Submittal Slots, New High Level Policy

**Please strictly adhere to the following resume naming convention:
ALL CAPS, NO SPACES B/T UNDERSCORES


Bill Rate market rate - market rate


PTN_US_GBAMSREQID_CandidateBeelineID
i.e. PTN_US_9999999_SKIPJOHNSON0413


MSP Owner: Rob Finton
Location: FORT MILL, SC
Duration: 6 months
GBaMS ReqID: 10628477

Application security Pen tester profile with some experience in development

Competencies: 4-6+ years experience
Digital : Python
Digital : Node.js
Digital : ReactJS
Security Testing
ASP.NET 4.5

Essential Skills:
*** Application security Pen tester profile with some experience in development
Technical Skills Strong understanding of internet architecture.
Skilled in security testing (SAST, DAST, SCA, OWASP Top 10).
Ability to verify vulnerabilities and manual testing.
Familiar with security platforms (Checkmarx, AppScan, Fortify, Veracode, etc.).
Experience with web services, JSON, and API testing.
Conducting vulnerability assessments and communicating security issues.
Proficient in programming (.NET, C, C, Java, Python).
Knowledge of OOP concepts and JavaScript (Node, React).
1-3 years of web development experience (HTML, ASP, ColdFusion, JSP, Node.js, React).
Knowledge of pipeline integration and source code management (Jenkins, GitHub, etc.).
knowledge of relational databases (SQL Server, MySQL).
Ability to write and understand SQL.
Basic knowledge of Azure.

Role Description:
Responsibilities Schedule and perform regular application tests.
Conduct penetration tests on important software and systems.
Test changes before they go live.
Analyze and validate vulnerabilities.
Track and report testing activities.
Present findings to stakeholders.
Maintain dashboards for vulnerabilities.
Improve asset management processes.
Enhance threat modeling.
Review source code and identify duplicates.
Use security testing tools (e.g., Fortify, Burp Suite).
Automate security scans and integrate with CICD pipelines.
Collaborate with developers to improve security practices.
Support incident response and investigations.
Perform various security tests (penetration, purple team, red team)
Technical Skills Strong understanding of internet architecture.
Skilled in security testing (SAST, DAST, SCA, OWASP Top 10).
Ability to verify vulnerabilities and manual testing.
Familiar with security platforms (Checkmarx, AppScan, Fortify, Veracode, etc.).
Experience with web services, JSON, and API testing.
Conducting vulnerability assessments and communicating security issues.
Proficient in programming (.NET, C, C, Java, Python).
Knowledge of OOP concepts and JavaScript (Node, React).
1-3 years of web development experience (HTML, ASP, ColdFusion, JSP, Node.js, React).
Knowledge of pipeline integration and source code management (Jenkins, GitHub, etc.).
knowledge of relational databases (SQL Server, MySQL).
Ability to write and understand SQL.
Basic knowledge of Azure.