Information Security Analyst (contract) Position Available In Bergen, New Jersey

Information Security Analyst (contract) 3.9 3.9 out of 5 stars

Montvale, NJ Title:

Penetration Tester The Penetration Tester will own all security testing-related activities and responsibilities across the entire E&T solution portfolio with additional focus on the Grants Management practice. This position will contribute to overall organization objectives of delivering timely, bug-free, and secure releases for our solutions by enabling a “shift-left” mindset when it comes to application and network security. Perform manual application penetration testing against API’s (REST/SOAP), Web Apps, Mobile apps, and thick client apps Perform threat modeling, evaluate application business logic, and perform application architecture reviews Engage with technical and non-technical audiences to articulate both testing processes, techniques and results; guide technical audiences on remediation options; and assist teams in weighing options Partner with the Cyber teams to develop new testing techniques, automation for testing and marketing collateral to support the practice and mentor junior and offshore team members on tools and techniques in performing tests Ability to exploit POCs and demonstrate application testing experience in real time via demos to internal audiences Minimum four (4) years of recent experience in application penetration testing of API’s, web applications, or mobile applications Ability to communicate reporting results with technical and non-technical audiences and lead remediation conversations Experience with burp suite pro, and other app testing tools such as Netsparker and Checkmarx One or more major ethical hacking certifications not required but preferred;

GWAPT, CREST, OSWE, OSWA

Contract has a possible extension OR FTE conversion Pay Rate Range Min Pay Rate Max Pay Rate Currency Unit 50 84 USD hourly