Web Application Penetration Testing Jobs

Application Penetration Tester

We are looking for security engineer who loves solving interesting problems and ...

Location

Poland , Warszawa

Salary:

Not provided

Robert Bosch Sp. z o.o.

Expiration Date

Until further notice

Requirements

Minimum 5 years of combined experience in penetration testing and security engineering roles
Professional certifications such as OSCP, CEH, CISSP, CISM, or equivalent
Advanced level of understanding of OWASP Top 10, CVE, general security controls, and other foundational topics such as the latest web application system exploits
Attacker mindset for breaking the websites with practical knowledge of OWASP
Commanding knowledge of VAPT concepts and best practices, including the requirements for WhiteHat/ethical hacking
Expert understanding of the difference between a vulnerability assessment and a penetration test in the context of assessment scope, objectives, and deliverables
In depth experience with common automated VAPT tools such as Nessus, Burp Suite
Proficiency with other common attack tools and frameworks such as Wireshark, Kali, Metasploit, etc.
Working knowledge of DevSecOps, CIS Security benchmarks, scripting languages (Python, PowerShell, Bash) for automation
Fluent English (both verbal and written)

Job Responsibility

Black-box and Grey Box penetration test applications
Security testing including reverse engineering of Mobile applications (Android and iOS)
Create innovative attacks tools/automations for project specific needs
Communicate complex vulnerability results to technical and non-technical audience
Perform research and contribute to open-source community on new attack methodology, vulnerability findings
Scope penetration tests and contribute to penetration test project management

What we offer

Competitive salary + annual bonus
Hybrid work with flexible working hours
Referral Bonus Program
Copyright costs for IT employees
Private medical care and life insurance
Cafeteria System with multiple benefits (incl. MultiSport, shopping vouchers, cinema tickets, etc.)
Prepaid Lunch Card
Number of benefits for families (for instance summer camps for kids)
Non-working day on the 31st of December

Fulltime

IT Security Specialist

Amla Commerce is looking for an experienced IT Security Specialist to join our t...

Location

United States , Milwaukee

Salary:

Not provided

Amla Commerce

Expiration Date

Until further notice

Requirements

Bachelor's degree in Computer Science, Information Technology, or a related field
Minimum 2 Years of relevant work experience
Proven experience in infrastructure security, manual penetration testing, vulnerability assessment, and web application security
Strong knowledge of penetration testing tools and frameworks, including Burp Suite, Owasp Zap, and Metasploit Framework
Familiarity with OWASP Top 10 vulnerabilities and best practices for securing web applications
Experience with IDS/IPS tools for monitoring and preventing intrusions
Familiarity with wireless/Wi-Fi security protocols, encryption standards, and best practices
Knowledge of network and system security protocols, technologies, and best practices
Strong problem-solving skills and ability to think strategically about security risks and solutions
Excellent communication and interpersonal skills to effectively collaborate with cross-functional teams and stakeholders

Job Responsibility

Conduct manual penetration testing of infrastructure systems, networks, and applications to identify security vulnerabilities and potential risks
Utilize various penetration testing tools such as Nmap, Nessus, Burp Suite, Owasp Zap, and Metasploit Framework to identify and exploit vulnerabilities
Perform vulnerability assessments using both manual approaches and vulnerability assessment and penetration testing (VAPT) tools like Nessus, OpenVAS, and Qualys
Collaborate with the development team to enhance the security of web applications by implementing secure coding practices and addressing OWASP Top 10 vulnerabilities
Configure and manage web application firewalls (WAF) to protect against common web-based attacks
Implement and maintain infrastructure firewalls, ensuring that proper configurations are in place to protect the network and systems from unauthorized access
Manage IP access control lists and handle blocking/unblocking requests as per security policies
Ensure compliance with SOC (Security Operations Center) standards and participate in audits and assessments
Provide end user system security by deploying and managing antivirus solutions, conducting security awareness training, and responding to security incidents
Stay up-to-date with the latest security threats, vulnerabilities, and industry best practices to proactively identify potential risks and recommend mitigation strategies

New

Senior Application Security Researcher

The JFrog CSO Security team is looking for a Senior Application Security Researc...

Location

Israel , Netanya/Tel Aviv

Salary:

Not provided

JFrog

Expiration Date

Until further notice

Requirements

4+ years of hands-on experience in an application security role
Experience with Web Penetration Testing (Hands On) - Mandatory
Strong coding skills, preferably in Java, Golang, and JavaScript - Mandatory
Experience with cloud environments - an advantage
Experience with microservices (Docker, K8S, Service Mesh) - an advantage
Excellent problem-solving skills and the ability to work independently with a strong sense of ownership
Good communication skills and a true passion to educate others and achieve continuous improvement

Job Responsibility

Continuously assess and challenge JFrog’s overall security posture to ensure optimal and up-to-date platform security in our products and systems
Evaluate architecture, design, and code to ensure they are free from potential vulnerabilities and security risks
Train and mentor developers about security frameworks, testing, vulnerabilities, and best practices to ensure code compliance
Evaluate new technologies and standards in the application security domain
Plan and lead cross-company efforts with the R&D that will improve JFrog’s security posture

Application Security Analyst

An application security analyst is a trained professional responsible for provid...

Location

United States

Salary:

100000.00 - 115000.00 USD / Year

Ann Taylor

Expiration Date

Until further notice

Requirements

Education and/or Certifications in Computer Science, Information Systems, other related field, or equivalent work experience
3-5+ years of IT work experience, with at least 2 years of experience working in Application security
Working experience with security testing tools (DAST, SAST, SCA)
Hands on experience with manual web application penetration testing (VAPT)
Proficient in Burp suite and Kali Linux tools
Experience on API testing
Knowledge of secure coding practices/frameworks such as OWASP, SSDF
Strong knowledge of application security principles
Knowledge on Threat Modeling and DevSecOps
Strong working knowledge of IT Security best practices

Job Responsibility

Conduct application security assessments to identify and mitigate security risks
Perform DAST scans for the internal and external applications
Conduct end-to-end Pentest engagement for E-commerce applications
Perform False positive analysis for vulnerabilities from scan results
Analyze the security risks and create vulnerability report with recommendations
Work collaboratively with cross-functional teams to identify and solve complex security problems
Work on ad hoc SAST scan requests and vulnerability analysis
Participate in incident response activities and provide technical guidance on security-related incidents
Develop and maintain technical documentation related to application security

What we offer

Merchandise discount at select KnitWell Group brands
Support for individual development plus opportunities for career mobility
A culture of giving back – local volunteer opportunities, annual donation and volunteer match to eligible nonprofit organizations, and philanthropic activities
Medical, dental, vision insurance & 401(K)
Employee Assistance Program (EAP)
Time off – paid time off & holidays

Fulltime

Cybersecurity Red Team Project Manager

The Cyber Security Project Manager focuses on coordinating penetration testing p...

Location

Belgium , Brussels

Salary:

Not provided

Sopra Steria

Expiration Date

Until further notice

Requirements

Technical expertise in system security vulnerabilities, remediation techniques, and network/web protocols (e.g., TCP/IP, UDP, IPSEC, HTTP)
experience in network, web application, and mobile penetration testing
familiarity with penetration testing tools and suites (e.g., Kali Linux, Burp Suite, Metasploit, Cobalt Strike, Mimikatz)
understanding of vulnerability scoring systems (CVSS) and frameworks (MITRE ATT&CK)
software development skills (C/C++, Java, Python) are advantageous
at least one relevant security certification (e.g., CEH, GPEN, GXPN, OSCP, OSC, or equivalent).

Job Responsibility

Coordinate all project activities with internal stakeholders (Lead Penetration Tester, Awareness Expert, Technical Quality Manager) and the customer
plan and execute penetration testing tasks, including scoping meetings and drafting the penetration testing plan
prepare and control access rights for penetration tests
refine and manage the security test calendar/schedule, ensuring tasks are executed according to plan
proactively inform stakeholders (e.g., ECB) about issues such as delays, resource unavailability, or other factors affecting testing or timelines
oversee quality assurance for penetration tests, including reviewing penetration testing reports
coordinate threat-based testing with the Lead Penetration Tester and awareness sessions with the Awareness Expert
support process improvement and documentation of vulnerability management in collaboration with the Technical Quality Manager
facilitate stakeholder communication and ensure completeness of handovers and knowledge transfer between resources.

What we offer

Mobility options (including a company car)
insurance coverage
meal vouchers
eco-cheques
continuous learning opportunities through the Sopra Steria Academy
the opportunity to connect with fellow Sopra Steria colleagues at various team events.

Fulltime

New

Security and Application Security Engineer

Beacon Technologies is seeking a Security and Application Security Engineer. The...

Location

United States , Las Vegas

Salary:

Not provided

Beacon Technologies

Expiration Date

Until further notice

Requirements

Minimum of five years of Information Security experience with at least two years of application-level security
Strong communication skills: ability to convey and document security guidelines, requirements, and coding best practices
Familiarity with Security Best Practices in common coding languages
Application Penetration Testing / API Security Testing
Software Development Life Cycle Design and Implementation
Static and Dynamic Application Testing Tools and Methods
Container and orchestration security (Kubernetes, Docker, Octopus, GitHub, etc.)
Familiarity with Application Security Testing Frameworks such as OWASP
Strong logical and analytical thinker
exceptional skills in security systems solutions

Job Responsibility

Operate as a liaison between the Security Team and the Development Teams
Preserve PCI and SOX Security Certification programs with a primary focus on ensuring compliance with the appropriate industry standards and security controls
Supporting incident response and architecture review whenever applications security expertise is needed
Integrating threat modeling practices into the SDLC
Work with other staff to perform periodic scans and evaluation of system security including areas such as patch management, penetration testing, vulnerability assessments, and other types of InfoSec-related tasks
Assist in identifying and communicating security exposures, information security incidents or non-compliance situations to IT management or the CISO as appropriate. Duties may also include collecting and documenting cyber security and incident response event data as necessary.

What we offer

Career advancement opportunities
extensive training
excellent benefits including paying for health and dental premiums for salaried employees.

Fulltime

Application Security Engineer

We are expanding our team to include a Security Engineer to be 100% focused on o...

Location

United States

Salary:

175000.00 USD / Year

Corporate Tools

Expiration Date

Until further notice

Requirements

Solid fundamentals in webapp and network pentesting (2+ years)
4+ years of professional experience in Ruby on Rails or equivalent and Vue or a Frontend equivalent framework
Experience with Linux and cloud environment testing
Understanding of security issues for desktop, virtual, cloud services and network infrastructures
Working knowledge of information systems security standards/practices (e.g., access control and system hardening, system audit and log file monitoring, security policies, and incident handling)
Experience with secure network protocols and encryption of communications between networked hosts
Experience in IT systems and security policies, standards, industry trends, and techniques
Experience with assessing APT threats, Penetration Testing, Vulnerability Management, attack methodologies, forensics analysis techniques, malware analysis, attack surface comprehension, Cyber Threat Emulation operations, Cyber Advanced Threat Emulation Team operations and research, identification, and/or verification of new APT TTPs
Fundamental understanding of security knowledge of testing mobile, native applications, web applications, distributed and database systems
Must be detail-oriented and possess strong problem-solving skills and ability to analyze for potential future issues

Job Responsibility

Understand and safely use various open source penetration testing tools and when appropriate, emulating hacker tactics, techniques, procedures
Create security vulnerability reports for both technical and executive audiences
While in-between assessments, you will be expected to help our security engineers think through solutions to problems you find
Automate tasks and script at a basic level to enhance penetration testing processes
Passion for learning new technologies and processes, and contributing to refining existing capabilities
Communicate with stakeholders (technical and non-technical), both verbal and written
Stay up to date on 0 day exploits for tech stacks we use

What we offer

100% employer-paid medical, dental and vision for employees
Annual review with raise option
22 days Paid Time Off accrued annually, and 4 holidays
After 3 years, PTO increases to 29 days. Employees transition to flexible time off after 5 years with the company—not accrued, not capped, take time off when you want
Paid Parental Leave
Up to 6% company matching 401(k) with no vesting period
Quarterly allowance
Open concept office with friendly coworkers
Creative environment where you can make a difference
Trail Mix Bar

Fulltime

Application Security Engineer II

In this role, you will support Rackspace's application security program by imple...

Location

India

Salary:

Not provided

Rackspace

Expiration Date

Until further notice

Requirements

2-4 years in the information security field
Experience working with application security, security testing, or DevSecOps practices
Working knowledge of the SDLC, security concepts, and vulnerability assessment methodologies
Hands-on experience with or understanding of programming and scripting languages including one or more of the following: Python, Java, Node.js, Go, Ruby, PHP
databases such as SQL
and related tools such as Github, Gitlab, Jenkins, and CircleCI
Understanding of common vulnerabilities, remediation approaches, and industry-standard classification schemes (CVE, CWE, CVSS, OWASP Top 10)
Familiarity with relevant compliance regulations, such as PCI-DSS, ISO 27001, SOC 2, or HIPAA
Passion for security and eagerness to learn about new technologies and emerging security vulnerabilities
Strong communication skills with the ability to work collaboratively across teams

Job Responsibility

Execute application security testing using both automated tools and manual testing techniques on web applications, APIs, containers, and other software components
Configure, maintain, and operate SAST, DAST, and other application security testing tools
Analyze and triage security findings, documenting clear remediation guidance for development teams
Support the vulnerability reporting process and track findings through to resolution
Assist with triage and validation of external vulnerability disclosures and bug bounty reports
Contribute to the development and documentation of application security processes and standards
Participate in security code reviews and threat modeling exercises
Help track and report metrics for application security program health
Collaborate with development and DevOps teams to integrate security into CI/CD pipelines
Stay current with application security trends, tools, and best practices

Fulltime

Web Application Penetration Testing

Randstad

Location:
India , Bengaluru

Category:
IT - Software Development

Contract Type:
Not provided

Salary:

Requirements:

Nice to have:

Additional Information:

Job Posted:
December 26, 2025

Expiration:
February 17, 2026

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for Web Application Penetration Testing

Application Penetration Tester

IT Security Specialist

Senior Application Security Researcher

Application Security Analyst

Cybersecurity Red Team Project Manager

Security and Application Security Engineer

Application Security Engineer

Application Security Engineer II

Web Application Penetration Testing

Randstad

Location:India , Bengaluru

Category:IT - Software Development

Contract Type:Not provided

Salary:

Requirements:

Nice to have:

Additional Information:

Job Posted:December 26, 2025

Expiration:February 17, 2026

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for Web Application Penetration Testing

Application Penetration Tester

IT Security Specialist

Senior Application Security Researcher

Application Security Analyst

Cybersecurity Red Team Project Manager

Security and Application Security Engineer

Application Security Engineer

Application Security Engineer II

Location:
India , Bengaluru

Category:
IT - Software Development

Contract Type:
Not provided

Job Posted:
December 26, 2025

Expiration:
February 17, 2026