Title: Application Security Analyst Duration: 6-month contract- CTH Pay Rate: $60-$70/hour on W2

Location: New Jersey- hybrid-07310

Being a member of the Application Security team, you will be part of the Technology Risk initiative to support offensive security assessments on applications and provide SME guidance to key projects.

The Application Offensive Security Consultant is responsible for providing technical direction and performing security assessments on applications. The person in this role should possess a good understanding of application security testing, red team / adversarial engagements, penetration testing, and related development expertise to guide project initiatives to ensure security best practices are being used.

#DICE #DC #MONSTOR

Your Primary Responsibilities

Perform Offensive Security Testing against applications and APIs.

Perform application threat hunting to evaluate risk to applications.

Perform manual security testing of applications.

Provide the vulnerability information in the predefined report format after performing the testing using manual methodology and tools

Generate reports on assessment findings and summarize to facilitate remediation, document technical issues identified during security assessments

Be a subject matter expert and respond to any security engineering questions/ requests related to Application Defense enhancements

Collaborate with Security Architects, Product Manager, Risk Managers, and other teams to deliver a high-quality product.

Talents Needed For Success

Minimum of 6 years of experience in testing web applications

Minimum of 4 years of hands-on experience with App PenTest tools such as Burp Suite and OWASP Zap

Ability to "think outside the box" and manually identify Client vulnerabilities and weaknesses in OWASP Top 10 without scanning

Understanding of the MITRE Framework and adversarial methodologies

Bachelor's Degree and/or equivalent experience

Nice To Have

Offensive security or penetration testing certifications

Certificates of attendance for completing penetration testing & red teaming courses

Passion for participating in Capture the Flags (CTFs) and training (TryHackMe, HackTheBox, etc)

Ability to work under pressure, multitask, and be flexible Best Regards,

Scott Solanki Direct - 551-362-8306