A leading IT Services Company - Delivering what business demands

Cybersecurity Application Penetration Tester – Government

QA EngineerQA EngineerContractRemoteTeam 11-50Since 2004H1B No SponsorCompany Site LinkedIn

Location

Vermont

Posted

103 days ago

Salary

Not specified

EnglishCloud

Job Description

• Perform application penetration testing on government applications • Identify and document security vulnerabilities • Collaborate with team members to validate and retest vulnerabilities post-remediation • Generate detailed technical reports outlining findings and recommendations • Assist in the development of remediation strategies based on vulnerability assessments

Job Requirements

Hands-on experience in application penetration testing
Ability to identify, validate, and document security vulnerabilities
Experience performing vulnerability re-testing after remediation
Strong understanding of authentication, authorization, and role-based access controls
Proficiency in analyzing application endpoints, workflows, and data flows
Strong written communication skills for producing detailed technical reports
Ability to use penetration testing tools for logging, packet tracing, and evidence collection
Experience performing penetration testing in government or regulated environments (preferred)
Familiarity with vendor-hosted or cloud-hosted application security testing
Skill in assessing complex application architectures and multi-role access models
Ability to provide detailed remediation guidance based on findings
Advanced reporting skills with clear risk ranking and reproducible steps
Specific Skills: Web and application penetration testing expertise
Ability to test authenticated user roles and access control paths
Strong vulnerability identification, exploitation, and impact assessment skills
Proficiency in packet tracing, traffic analysis, and log review
Ability to clearly document findings with screenshots, evidence, and reproduction steps
Strong understanding of common security flaws (OWASP Top 10, access control weaknesses, session management issues)