Lead Application Penetration Tester

2 weeks ago


Washington, United States Kavaliro Full time

Kavaliro is seeking an experienced Lead Application Penetration Tester to join our cyber security client. This role is perfect for someone passionate about cybersecurity and skilled in identifying and mitigating vulnerabilities in application security. As the lead, you'll be responsible for the security of cloud-native, microservices-based applications, with a focus on web, mobile, and cloud security. You’ll also mentor junior team members and help develop effective security strategies.


Your key responsibilities will include conducting comprehensive security assessments, utilizing tools like SAST, DAST, and SCA to review source code, and performing threat modeling to ensure the effectiveness of security controls. You’ll work closely with global development teams to enhance the security of our globally adopted applications.



Key Responsibilities
Leadership & Mentorship: Lead and mentor a team of penetration testers, ensuring high-quality security assessments.
Security Testing: Oversee and perform security testing on mobile applications (iOS & Android) and developer operations.
Source Code Reviews: Conduct thorough reviews to identify security weaknesses.
Assessments & Reporting: Execute security assessments, draft reports, and provide actionable recommendations.
Strategy Development: Create and implement security strategies and best practices.
Collaboration: Work with global development teams to maintain application security.



Required Skills & Experience
Bachelor’s degree in Computer Science or a related field (or equivalent experience).
Relevant certifications (GWAPT, OSCP, CEH, etc.).
5+ years of experience in application security, including at least 2 years in a leadership role.
Proficiency in multiple programming languages and secure coding practices.
Strong analytical skills with attention to detail.
Experience with tools like Burp Suite Pro, Checkmarx, Corellium, AWS/Azure cloud security, and more.



Benefits
Health & Wellness: Comprehensive medical, dental, and vision insurance.
Financial: 401(k) matching.
Work-Life Balance: Generous PTO including vacation, sick leave, and holidays.
Professional Development: Access to training programs, workshops, certifications, and tuition reimbursement.
Culture & Perks: Inclusive work environment, team-building activities, and access to the latest technology and tools.




Kavaliro provides Equal Employment Opportunities to all employees and applicants. All qualified applicants will receive consideration for employment without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws. Kavaliro is committed to the full inclusion of all qualified individuals. In keeping with our commitment, Kavaliro will take the steps to assure that people with disabilities are provided reasonable accommodations. Accordingly, if reasonable accommodation is required to fully participate in the job application or interview process, to perform the essential functions of the position, and/or to receive all other benefits and privileges of employment, please respond to this posting to connect with a company representative.



  • Washington, United States Kavaliro Full time

    Kavaliro is seeking an experienced Lead Application Penetration Tester to join our cyber security client. This role is perfect for someone passionate about cybersecurity and skilled in identifying and mitigating vulnerabilities in application security. As the lead, you'll be responsible for the security of cloud-native, microservices-based applications,...


  • Washington, United States Kavaliro Full time

    Kavaliro is seeking an experienced Lead Application Penetration Tester to join our cyber security client. This role is perfect for someone passionate about cybersecurity and skilled in identifying and mitigating vulnerabilities in application security. As the lead, you'll be responsible for the security of cloud-native, microservices-based applications, with...

  • Penetration Tester

    2 weeks ago


    Washington, United States Editech Staffing Full time

    Job OverviewOur client is looking for an experienced Application Penetration Tester to assess the security of a cloud-native, microservices-based architecture. You will focus on web and mobile applications, cloud security testing, adversary emulation, and continuous security improvement.Key responsibilities include static and dynamic source code reviews...

  • Penetration Tester

    2 weeks ago


    washington, United States Editech Staffing Full time

    Job OverviewOur client is looking for an experienced Application Penetration Tester to assess the security of a cloud-native, microservices-based architecture. You will focus on web and mobile applications, cloud security testing, adversary emulation, and continuous security improvement.Key responsibilities include static and dynamic source code reviews...

  • Penetration Tester

    2 weeks ago


    Washington, United States Editech Staffing Full time

    Job OverviewOur client is looking for an experienced Application Penetration Tester to assess the security of a cloud-native, microservices-based architecture. You will focus on web and mobile applications, cloud security testing, adversary emulation, and continuous security improvement.Key responsibilities include static and dynamic source code reviews...


  • Washington, Washington, D.C., United States Chenega Corporation Full time

    Job Title: Intermediate Penetration TesterChenega Corporation is seeking a highly skilled Intermediate Penetration Tester to join our team. As an Intermediate Penetration Tester, you will be responsible for identifying vulnerabilities and weaknesses within systems, conducting continuous penetration testing of the enterprise IT environment, and assessing the...


  • Washington, United States Kavaliro Full time

    Kavaliro is seeking an experienced Application Penetration Tester with a strong background in cybersecurity and application security for our security client. In this role, you'll be responsible for identifying and addressing vulnerabilities in web, mobile, and cloud-native applications, while working with global development teams to ensure continuous...


  • Washington, Washington, D.C., United States Chenega Corporation Full time

    Job Title: Intermediate Penetration TesterChenega Corporation is seeking a highly skilled Intermediate Penetration Tester to join our team. As an Intermediate Penetration Tester, you will be responsible for identifying vulnerabilities and weaknesses within our systems, conducting continuous penetration testing, and assessing the effectiveness of security...


  • Washington, Washington, D.C., United States Gunnison Consulting Group Inc Full time

    Job Title: Junior Penetration TesterGunnison Consulting Group Inc is seeking a highly skilled and motivated Junior Penetration Tester to join our team. As a Junior Penetration Tester, you will be responsible for conducting security testing of IT assets, web applications, infrastructure assets, and technologies.Key Responsibilities:Conduct security testing of...


  • Washington, Washington, D.C., United States 3M Consultancy Full time

    Job Title: IT Security Specialist - Penetration TesterThis is a remote position.Job Summary:We are seeking an experienced IT Security Specialist to join our team at 3M Consultancy. As a Penetration Tester, you will be responsible for analyzing information security systems and applications to identify vulnerabilities and recommend security measures to protect...


  • Washington, Washington, D.C., United States 3M Consultancy Full time

    Job Title: IT Security Specialist - Penetration TesterThis is a remote position.Job Summary:We are seeking an experienced IT Security Specialist - Penetration Tester to join our team at 3M Consultancy. The successful candidate will be responsible for analyzing information security systems and applications, recommending and developing security measures to...


  • Washington Highlands, Washington, D.C., United States Hummingbirds Innovations Full time

    About the RoleWe are seeking a highly skilled Security RMF Penetration Tester to join our team at Hummingbirds Innovations. As a key member of our security team, you will be responsible for conducting penetration testing, vulnerability assessments, and manual exploitation of servers, web applications, and databases to identify vulnerabilities,...

  • Penetration Tester

    1 week ago


    Washington, United States Editech Staffing Full time

    Job OverviewWe are seeking an experienced Application Penetration Tester to join our team at Editech Staffing. As a key member of our security team, you will be responsible for assessing the security of cloud-native, microservices-based architectures.Your primary focus will be on web and mobile applications, cloud security testing, adversary emulation, and...


  • Washington, Washington, D.C., United States Kavaliro Full time

    Job Title: Lead Application Penetration TesterKavaliro is seeking an experienced Lead Application Penetration Tester to join our cyber security team. This role is perfect for someone passionate about cybersecurity and skilled in identifying and mitigating vulnerabilities in application security.Key Responsibilities:Lead and mentor a team of penetration...


  • Washington, Washington, D.C., United States Editech Staffing Full time

    Job Title: Lead Application Penetration TesterJob Summary:We are seeking a highly skilled and experienced Lead Application Penetration Tester to join our team. As a key member of our cybersecurity team, you will be responsible for leading comprehensive security assessments of cloud-native, microservices-based architectures.Key Responsibilities:Lead and...


  • Washington, Washington, D.C., United States Kavaliro Full time

    Kavaliro Cybersecurity RoleWe are seeking an experienced Lead Application Penetration Tester to join our team at Kavaliro. This role is ideal for someone passionate about cybersecurity and skilled in identifying and mitigating vulnerabilities in application security.ResponsibilitiesLead the application security team in identifying and mitigating...


  • Washington, Washington, D.C., United States Kavaliro Full time

    Lead Application Penetration TesterKavaliro is seeking an experienced cybersecurity professional to lead our application penetration testing team. As a seasoned expert in cloud-native, microservices-based applications, you will be responsible for identifying and mitigating vulnerabilities in web, mobile, and cloud security.Key Responsibilities:Leadership &...


  • Washington, DC, United States Kavaliro Full time

    Lead Application Penetration TesterKavaliro is seeking an experienced Lead Application Penetration Tester to join our cyber security team. This role is perfect for someone passionate about cybersecurity and skilled in identifying and mitigating vulnerabilities in application security.Key ResponsibilitiesConduct comprehensive security assessments of...


  • Washington, United States Maveris Full time

    This role will support the improvement of cybersecurity analytics by conducting cloud adversarial emulation testing on the Department of Veterans Affairs (VA) Enterprise Cloud (VAEC) systems. The ideal candidate will have a strong background in penetration testing, particularly in cloud environments, and experience with purple-teaming activities.In this...


  • Washington, United States Kavaliro Full time

    Lead Application Penetration TesterKavaliro is seeking an experienced cybersecurity professional to lead our application penetration testing team. This role is ideal for someone passionate about identifying and mitigating vulnerabilities in application security.Key ResponsibilitiesConduct comprehensive security assessments of cloud-native,...