Web Application Penetration Tester

Nave Security LLC - Cambridge, MA

Full-time

Cambridge, MA

About the position

The Web Application Penetration Tester at Nave Security LLC is responsible for conducting comprehensive penetration tests on web applications to identify and mitigate security vulnerabilities. This role involves both manual and automated testing techniques, ensuring the security of applications by analyzing and documenting vulnerabilities, performing source code reviews, and collaborating with development teams to promote secure coding practices.

Responsibilities

• Conduct thorough penetration tests on web applications using both manual and automated techniques
• Identify, analyze, and document security vulnerabilities, including those in the OWASP Top 10
• Perform source code reviews to identify security flaws
• Collaborate with development teams to provide guidance on secure coding practices

Requirements

• Bachelor's degree in Computer Science, Information Security, or related field
• 3+ years of experience in web application security testing
• In-depth knowledge of web technologies, protocols, and common web application vulnerabilities
• Proficiency in using web application testing tools such as Burp Suite and nuclei
• Familiarity with common web frameworks and content management systems
• Experience with API security testing

Nice-to-haves

• CBBH, CWEE, PJWT, GWAPT, PWPT or other relevant security certifications