Senior Web Application Penetration Tester

🕒 August 4

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

SIXGEN

WebsiteLinkedInAll Job Openings

51 - 200 employees

💼 Consulting

🎖️ Defense

🔒 Cybersecurity

💰 $500k Seed Round on 2017-09

Consulting • Defense • Cybersecurity

SIXGEN is a cybersecurity company that provides both defensive and offensive cyber capabilities. It focuses on developing and applying automation and machine learning across the cybersecurity operations lifecycle to increase efficiency while preserving tradecraft. SIXGEN offers a comprehensive solution for cyber operations, integrating capabilities in areas such as space, RF, and drone operations with its powerful cyber products and expert services. The company provides unified cyber solutions, including remote access vulnerability exploitation and other cyber operations on a self-contained platform that is listed on the DoDIN's Approved Product List (APL).

📋 Description

• Conduct penetration testing of web applications, APIs, mobile applications, databases, and client-side technologies • Perform application enumeration, endpoint discovery, vulnerability research, and exploitation activities • Identify, validate, and assess vulnerabilities across complex environments • Analyze attack paths and security weaknesses to determine business and operational impact • Develop and utilize custom tools, scripts, and payloads to support testing activities • Perform network mapping, vulnerability analysis, and security assessments across applications and supporting infrastructure • Research emerging vulnerabilities, attack techniques, and exploitation methodologies • Support post-exploitation activities involving cloud and enterprise environments when applicable • Collaborate with clients and internal teams to define scope, review findings, and recommend remediation strategies • Communicate technical concepts and findings to technical and non-technical stakeholders • Produce comprehensive reports including detailed findings, exploitation procedures, risk analysis, and mitigation recommendations • Participate in client meetings and provide ongoing updates throughout assessment activities

🎯 Requirements

• 5+ years of experience in web application penetration testing or offensive cybersecurity • Demonstrated experience conducting manual web application security assessments • Knowledge of modern web application vulnerabilities, attack methodologies, and exploitation techniques • Experience with network mapping, vulnerability scanning, and penetration testing methodologies • Familiarity with NIST 800-series standards and cybersecurity best practices • Experience developing scripts, payloads, or custom testing tools • Strong analytical, problem-solving, and communication skills • Must be able to obtain a Secret Clearance • One or more listed offensive security certifications strongly preferred, including CWES, CWEE, OSCP, OSWA, OSWE, CRTO, GWAPT, or other relevant hands-on offensive security certifications • Preferred experience with cloud environments, post-exploitation activities, Active Directory security assessments, FISMA compliance requirements, government or regulated industry clients, and common offensive security tools and frameworks

🏖️ Benefits

• Employer-paid health insurance premiums (medical, dental, vision) for you and your family • Employer-paid short/long term disability insurance and basic life/AD&D insurance • 401K with a 4% employer contribution • Professional development reimbursement options available (training, certification, education, etc) • Flexible and remote work policies for most positions • Flexible PTO and holiday schedule