Job: Web Application Penetration Tester

Location: Pleasanton, CA (Hybrid)

Term: 12+ Months

Visa : NO H1B

 Job Description:

Must Have:

• LinkedIn with a picture
• Advanced knowledge web application penetration testing.
• Extensive knowledge of and proven experience with penetration testing of web applications, and methods and frameworks for identifying and remediating vulnerabilities.
• In-depth knowledge of OWASP Top 10 and other frameworks.
• Proficient knowledge of Java, Spring, and Oracle.
• Working knowledge of Linux and Windowse

The Web Application Penetration Tester is expected to:

• Conduct penetration tests on web pages to identify and exploit security vulnerabilities.

• Document the findings and provide techniques and solutions to remediate vulnerabilities.

• Work closely with the development team to implement remediations/solution and verify fixes.

• Plan and manage all aspects of the penetration testing function. 

• Mentor the development team in building and securing web applications using OWASP and other mainstream frameworks.

Provide primary development for CARE modules:

• Conduct details penetration tests using common frameworks such as OWASP to discover vulnerabilities. 

• Work closely with the development team to remediate vulnerabilities. 

• Develop automation scripts to re-run security tests and ensure that new vulnerabilities are caught before they are deployed to higher environments. 

• Assist the development team in ensuring that applications are securely designed and developed. 

• Promote high quality, scalability, and timely completion of projects. 

• Ensure that all project documentation is produced in the standard format, that it follows internal documentation. 

• Serve as subject matter expert for all matters related to web application security. 

• Create, test, and implement code changes and integrate them with existing programs as needed. 

• Coordinate meetings/communications with the Claims User Community, as needed. 

• Ensure that all I.T. requirements (documentation, sign-off, and approvals) are completed as per System Engineering Handbook. 

• Provide timely and effective reporting on status of projects. 

Provide primary support for CARE modules:

• Perform peer code reviews and provide feedback. 

• Work with cross functional teams, including Business, QA, and Operations. 

• Work closely with Business Users to scope and draft functional requirements. 

• Help Users to create test cases, use cases and help with functional testing. 

• Debug the system for certain behavior of the feature(s) and explain it to the Users.