Senior Offensive Security Engineer (Web & API)

Analisi del mercato

Stack

Dettagli

Gratis, dopo l'accesso.

Candidati

Carica il tuo CV: datori di lavoro e recruiter di diversi paesi che cercano il tuo profilo potranno contattarti direttamente.

Descrizione

About You You are an experienced offensive security professional with strong manual penetration testing expertise and a disciplined approach to testing production environments. You validate vulnerabilities through controlled exploitation attempts and produce clear, reproducible evidence. You are comfortable testing web applications, REST/SOAP APIs, and applications protected by enterprise SSO. You understand how to assess authorization across roles and accounts, identify exploitable weaknesses, and explain their impact. Note: This role operates under a contractor model for an initial period of 2 months , with the possibility of extension. You Bring to Applaudo the Following Competencies: Bachelor’s Degree in Computer Science, Cybersecurity, Software Engineering, or a related field is desired, or equivalent professional experience. 5+ years of hands on penetration testing experience, including 3+ years testing web applications and APIs in production environments. Manual web application penetration testing following OWASP WSTG and the OWASP Top 10. API security testing following the OWASP API Security Top 10, including BOLA/IDOR and broken function level authorization. SOAP and WSDL web service testing using Burp Suite, SoapUI or an equivalent tool. Burp Suite Professional as your primary tool, including extensions and custom payloads. Experience testing applications protected by SSO with OAuth 2.0, OpenID Connect and SAML on Microsoft Entra ID. Multi role and multi account aut

Descrizione completa, azienda e link per candidarti: dopo l'accesso. Accedi

I contatti del datore di lavoro (email/telefono/telegram) sono nascosti nell'anteprima pubblica. Invia il tuo CV così i datori di lavoro possono contattarti direttamente.