Security Engineer

We are looking for a Senior Penetration Tester / Application Security Engineer to perform a comprehensive security assessment of a web application and its APIs.

Project start: approximately Q4
Engagement: project-based / part-time
Main scope: Web Application & API Penetration Testing

Tech Stack

• Drupal with significant custom development
• Vue.js frontend and admin panel
• Java backend
• MongoDB
• React Native for iOS and Android (mobile pentesting may be added later)

Responsibilities

• Perform manual penetration testing of the web application and admin panel
• Conduct API security testing
• Test authentication, authorization, and role-based access controls
• Identify business logic and security vulnerabilities
• Assess the application against OWASP Top 10 and OWASP API Security risks

• Prepare a professional penetration testing report with severity levels, vulnerability descriptions, evidence, and remediation recommendations

   

Requirements

• Strong hands-on experience in Web Application and API Penetration Testing
• Strong manual pentesting skills, not only automated scanning
• Solid experience with Burp Suite and standard security testing tools
• Experience testing custom-built web applications
• Experience preparing professional pentest reports
• Experience with Java, Drupal, or Vue.js is a plus
• Mobile application pentesting experience is a plus, but not required