Penetration Tester

Title: Penetration TesterLocation: Charlotte, NC; New York, NY; San Francisco, CA; Irving, TX; Chandler, AZ, Minneapolis, MN (Hybrid)Duration: 12+Months ContractJob DescriptionMust have5+ years of information security applications and systems experience3+ years of DAST (Dynamic Application Security Testing) experience3+ years of automated information security penetration tools experiencePenetration testing certification such us GPEN, GXPEN, GWAPT, or OSCPSkills: The Senior Information Security Engineer will:Conduct Dynamic Application Security Testing (DAST) through manual testing and by using automated testing toolsReview test results from toolsEnsure that DAST tests are completed successfullyIdentify and remove any false positives from automated testing tool reportsTriage & Disposition results and enforce a Bug BarVerify/validate defect fixesProvide application security consulting SME Support to developersAssist developers with understanding of security defects and riskAssist in defining acceptable solution to fix defectsStay up to speed on 3rd party (inside and outside Wells Fargo) known security vulnerabilitiesDevelop and review malicious use cases/threat modelsMaintain a broad understanding of security technologies and productsComments: Requirements: 5 years of information security applications and systems experience3 years of DAST Dynamic Application Security Testing experience3 years of automated information security penetration tools experience Penetration testing certification such us GPEN GXPEN GWAPT or OSCP