Offensive Security Penetration Tester

About the role

The Offensive Security Penetration Tester will lead application security initiatives, performing both manual and automated testing to uncover vulnerabilities in running applications. This senior‑level position works closely with DevOps, developers, and product owners to embed security throughout the software development lifecycle.

Key responsibilities

• Conduct static (SAST) and dynamic (DAST) application security testing, including source‑code reviews.
• Collaborate with DevOps teams to integrate security tooling and continuous assessment pipelines.
• Provide one‑on‑one guidance to developers on remediation strategies and secure coding practices.
• Evaluate, tune, and monitor web application firewalls (WAF) and review security alerts.
• Lead threat modeling sessions and security architecture reviews for new and existing applications.
• Assist with open‑source component analysis and mobile app security assessments.

Required profile

• Senior‑level professional with strong programming experience (Java, Python, Swift or similar).
• Proven ability to communicate risk and remediation recommendations to technical and executive audiences.
• Experience driving secure development standards and influencing architecture decisions.

Required skills

• Java
• Python
• Swift
• SAST tools (e.g., Checkmarx)
• DAST tools (e.g., Burp Suite)
• Open‑source component analysis tools (e.g., Black Duck, Sonatype)
• Mobile security solutions (e.g., NowSecure)
• Threat modeling