5-7 years of experience in application security testing and penetration testing
Solid knowledge of programming languages (C, C#, Python, Java, JavaScript) and frameworks (AngularJS)
Experience with web services and data formats like XML, JSON, SOAP, REST and AJAX
Expertise in using tools such as Burp Suite for testing
At least 2 years of experience in information security tasks
Relevant certifications (OSCP, OSWE, BSCP) are preferred, with OSCP as a requirement
Candidates must reside in Florida.
Responsibilities
Conduct penetration testing of web and mobile applications, APIs, and thick clients
Perform source code reviews and whitebox penetration testing to highlight application flaws
Engage in reverse engineering of applications to identify vulnerabilities
Chain application flaws to other areas like cloud or on-prem AD infrastructure when needed
Create detailed reports on findings and suggest remediation strategies for significant issues
Carry out SAST and DAST evaluations on various application types including SaaS and custom applications
Utilize scanners to identify vulnerabilities while validating and eliminating false positives
Maintain an advanced understanding of OWASP standards across various platforms.
Benefits
Leadership prioritizing substance and quality in execution
Collaboration opportunities with skilled security professionals passionate about technical excellence
Competitive compensation with opportunities for professional growth
Paid education and professional development reimbursement
Flexible work environment to enhance productivity
Paid volunteer day per year to contribute to community engagements
Paid day off for birthdays
Standard public holidays paid
Fully remote work available within Texas or Florida.
Full Job Description
Who we are looking for
Core values:
You have a customer-first mentality. Is a great communicator with clients, project managers, and teammates. Rapid responses and on time.
You deliver work that you take pride in. Your work is an autograph of your excellence.
You dig deeper into every finding. Doesn't stop until impact is proven.
You are comfortable being uncomfortable. Goes towards obstacles, not away from them. Consulting isn't your typical job and requires adapting to rapidly changing environments.
You are always learning. Cybersecurity is changing every day, and you need to keep up or want to keep up. Be deeply aware of your skillset and be willing to improve.
You are Self-motivated and dependable.
You are humble. Egos don't have a place at Packetlabs.
Education and experience:
We are looking for an experienced developer/application security tester to join our team:
Solid working knowledge of programming languages, including C, C#, Python, Objective-C, Java, JavaScript, SQL, and frameworks like AngularJS.
Familiarity with web services and data exchange formats such as XML, JSON, SOAP, REST, and AJAX.
Understanding of AI/LLM weaknesses and flaws in applications.
Extensive experience/expertise in using an attack proxy (e.g. Burp Suite)
Preferred if you have 3 - 5 years of experience working in penetration testing and consulting
A graduate of a post-secondary college or university degree program.
Has at least two years of experience dealing with information security-related tasks.
Has professional qualifications (one or more): OSCP, OSWE, BSCP.
OSCP or Burp is mandatory for our organization.
You must be located in Florida.
What you'll be doing
Your primary role is to perform penetration testing of web applications, mobile applications, thick clients, and APIs.
Source code review and whitebox penetration testing to prove the impact of application flaws.
Reverse engineering of mobile and thick client applications.
You sometimes chain application flaws to other areas, such as cloud and on-prem AD infrastructure. Opportunities for lateral movement into the infrastructure teams are limited and given at the manager's discretion.
Develop detailed reports on findings and remediations for impactful findings. You will learn to debrief these findings at both a technical and executive level.
Perform SAST and DAST on enterprise, SaaS, and custom in-house applications.
Experience in using scanners and knowledge of validation and elimination of false positives.
A strong understanding of OWASP in Web, API, Mobile, and AI/LLM is necessary, but you will be asked to go beyond.
Why Us
A leadership team that values substance, quality, and disciplined execution
Collaboration with a highly skilled team of security professionals who are passionate about technical excellence and raising the bar
Competitive compensation and growth opportunity
Paid education and professional development reimbursement to support continued learning, certifications and technical growth
Flexible work environment that empowers employees to do their best work
Paid volunteer day each year to give back to your community
Paid Birthday day off
Paid U.S. public holidays
Fully remote within Texas or Florida
At-Will Employment
This position is at-will, and this job posting does not constitute an employment contract or guarantee of continued employment.
How to Apply
If this sounds like you, apply today. We're looking for someone who wants to build a career in cybersecurity and is ready to make an impact
