Penetration Tester / Security Analyst
Location: San Francisco, CA, Onsite
Duration: 6 Months (11/24/2025 – 5/27/2026)
Summary:
Looking for an experienced Penetration Tester with strong skills in VAPT for Web, API, and Thick-Client applications, along with SAST/DAST expertise. The role involves performing manual and automated testing, identifying vulnerabilities, and integrating security into DevSecOps pipelines.
Key Skills & Tools:
- VAPT, Web/API/Thick Client Security Testing
- Tools: Burp Suite, Metasploit, Nessus, Core Impact, Checkmarx
- Strong knowledge of OWASP Top 10, SANS 25, and NIST standards
- Hands-on with secure coding reviews and CICD DevSecOps integration
- Experience in Red Teaming and bug bounty programs preferred
Ideal Candidate:
- 5–8 years of security testing experience
- Proven ability to mentor teams and implement enterprise security solutions