Web Application Penetration Tester

KirkpatrickPrice

1d • Remote

About The Position

KirkpatrickPrice is seeking a Penetration Tester who enjoys teaching as much as testing. We’re a security partner to companies new to the need for penetration testing. Our clients need security experts who are experienced, patient, and communicate well, to help them discover vulnerabilities and teach them how to strengthen their defenses. We love empowering and inspiring our clients to effectively protect their most sensitive data. This particular position requires strong experience testing web applications, while also supporting network, mobile application, and emerging AI security assessments. Competitive applicants will demonstrate hands on web application testing experience; possess the GWAPT, PWPA or equivalent penetration testing certifications; and demonstrate both the ability and desire to teach and mentor. Experience testing mobile applications, APIs, cloud environments, and AI enabled applications or large language model (LLM) integrations will further differentiate strong candidates. Experience with web development, app development, and evaluating the OWASP Top 10, OWASP Mobile Top 10, and broader OWASP testing methodologies is highly valued.

Requirements

• Strong experience testing web applications.
• Hands on web application testing experience.
• GWAPT, PWPA or equivalent penetration testing certifications.
• Ability and desire to teach and mentor.
• Experience with web development.
• Experience with app development.
• Experience evaluating the OWASP Top 10.
• Experience evaluating the OWASP Mobile Top 10.
• Experience evaluating broader OWASP testing methodologies.
• Experience performing iOS and Android mobile application penetration testing in alignment with methodologies such as the OWASP Mobile Application Security Testing Guide (MASTG) and OWASP Mobile Top 10.
• Knowledge of and ability to operate within major cloud environments such as Azure, AWS, and Google Cloud.
• Hold certifications relevant to the requirements detailed above.
• Efficient with the latest penetration testing tools, techniques, and exploits.
• Passionate about continuous research and improving technical tradecraft.
• Must detest a daily commute to an office.
• Virtual office experience is essential.
• Must reside anywhere in America.

Nice To Haves

• Experience testing mobile applications, APIs, cloud environments, and AI enabled applications or large language model (LLM) integrations.
• Familiarity with AI and LLM security testing concepts such as prompt injection, insecure plugin or agent functionality, data exposure risks, authorization weaknesses, and abuse of AI integrated business workflows, evaluated against frameworks such as the OWASP LLM Top 10 and MITRE ATLAS.
• Ability to understand and interpret a wide range of business environments including financial services, healthcare, technology providers, retail, and SaaS environments.
• Energetic about working in a small company environment and sharing in and contributing to KirkpatrickPrice’s growth.

Responsibilities

• Analyze a company’s defenses and design an effective attack plan.
• Perform web application penetration testing.
• Support network, mobile application, and emerging AI security assessments.
• Test internal and external network infrastructure.
• Perform iOS and Android mobile application penetration testing.
• Conduct security testing of AI and LLM integrations.
• Operate within major cloud environments such as Azure, AWS, and Google Cloud.
• Understand client needs and present remediation guidance.
• Teach clients applicable cybersecurity concepts.
• Collaborate closely with colleagues across the penetration testing team.

Benefits

• Competitive applicants will demonstrate hands on web application testing experience; possess the GWAPT, PWPA or equivalent penetration testing certifications; and demonstrate both the ability and desire to teach and mentor.
• Some days, it’s fun to just stay in superhero pajamas.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed