Application Penetration Tester 

Kelly Mitchell Group - Spring, TX

Full-time

Spring, TX

Professional, Scientific, and Technical Services

About the position

The Enterprise Application Tester will play a crucial role in supporting the transition of applications from on-premises to SAP/Cloud environments. This position focuses on conducting manual vulnerability assessments for various applications, ensuring security and compliance throughout the process. The tester will be responsible for creating detailed reports on findings and communicating these effectively to both technical staff and management.

Responsibilities

• Perform manual vulnerability assessments for web, SAP, Cloud, and Mobile applications, as well as traditional infrastructure penetration testing.
• Create high-quality written reports detailing findings from web and thick-client vulnerability assessments.
• Articulate findings to peer technical staff and various levels of management.
• Capture and analyze network traffic to identify vulnerabilities and sensitive data.

Requirements

• 3+ years of experience with enterprise-level security control implementations, including NIDS/NIPS, Corporate Antivirus, Enterprise Web Filtering, Data Loss Prevention, and Insider-threat Mitigation.
• 2+ years of experience in penetration and vulnerability testing for web and thick-client applications in an enterprise environment.
• 1+ years of experience with programming and/or scripting in languages such as .NET, Java, PHP, Ruby, Perl, or Bash.
• 1+ years of experience with SQL, including a strong understanding of SQL syntax and basic management of MS SQL databases.
• Strong understanding of web technologies, including HTTP, HTML, CSS, and Database Connectivity.
• Understanding of compliance and regulatory requirements such as PCI DSS, SOX, and HIPAA.
• Ability to articulate and/or train others on the OWASP Top 10 and related concepts.
• Solid grasp of core security fundamentals and concepts.

Benefits

• Medical, Dental, & Vision Insurance Plans
• 401K offered