Penetration Tester

About Client: The Client is a leading global IT services and consulting company, providing a wide range of services to clients in various industries, including banking, financial services, retail, manufacturing, healthcare, and more. It is one of the largest employers in the IT industry and has a vast and diverse workforce. The company places a strong emphasis on employee training and development. Client is known for its commitment to innovation and invests in research and development to stay at the forefront of technological advancements. It offers a comprehensive set of services, including: IT Services: Application development, maintenance, and testing. Consulting: Business consulting, IT strategy, and digital transformation. Business Process Outsourcing (BPO): Outsourcing of business processes to improve efficiency. Enterprise Solutions: Implementation and support of enterprise-level software solutions. Digital Services: Services related to digital technologies, such as analytics, cloud, and IoT. Salary Range: $90K-$120K/Annum Job Description: Proven expertise as an Application Security Engineer or similar role Experience in conducting application penetration testing on web and API applications Expert-level knowledge of Application Security Testing Techniques - Vulnerability Scanning, Penetration Testing, Ethical Hacking Experience with security assessment tools and techniques, such as static code analysis, dynamic application testing, and penetration testing Experience with security engineering practices, including web application security, network security, authentication and authorization protocols, cryptography, automation, and other software security disciplines Experience with Security Reviews and Threat Modeling to integrate security tools and processes into the DevOps pipeline Deep understanding of secure coding practices, common application security vulnerabilities (e.g., OWASP Top 10), and secure software development methodologies Well versed with security design, code reviews & Security automation for Dev Sec Ops readiness Proficiency with security tools and technologies like Burp Knowledge of HTTP, HTTPS, SSL, TLS, SFTP, etc., as well as practical experience using public clouds like AWS, GCP, and Azure. Knowledge of security technologies like firewalls, intrusion detection systems, and encryption to protect the application from external threats. Knowledge of server, client, and database interactions, different architectural patterns like MVC (Model-View-Controller) and microservices. Experience with programming languages, frameworks, and web technologies commonly used in application development Experience working with at least one scripting language such as Python, Bash, JavaScript, etc. About ApTask: ApTask is a leading global provider of workforce solutions and talent acquisition services, dedicated to shaping the future of work. As an African American-owned and Veteran-certified company, ApTask offers a comprehensive suite of services, including staffing and recruitment solutions, managed services, IT consulting, and project management. With a focus on excellence, collaboration, and innovation, ApTask provides unparalleled opportunities for professional growth and development. As a member of the ApTask team, you will have the chance to connect businesses with top-tier professionals, optimize workforce performance, and drive success across diverse industries. Join us at ApTask and be part of our mission to empower organizations to thrive while fostering a diverse and inclusive work environment. Applicants may be required to attend interviews in person or by video conference. In addition, candidates may be required to present their current state or government issued ID during each interview. Candidate Data Collection Disclaimer: At ApTask, we prioritize safeguarding your privacy. As part of our recruitment process, certain Personally Identifiable Information (PII) may be requested by our clients for verification and application purposes. Rest assured, we strictly adhere to confidentiality standards and comply with all relevant data protection laws. Please note that we only collect the necessary information as specified by each client and do not request sensitive details during the initial stages of recruitment. If you have any concerns or queries about your personal information, please feel free to contact our compliance team at businessexcellenceaptask.com