White Box Web Application Penetration Testing: Perform in-depth assessments of web applications using source code, architecture diagrams, and other internal documentation to identify vulnerabilities and security gaps.
API Penetration Testing: Evaluate RESTful APIs for security flaws, including authorization, authentication, data exposure, business logic vulnerabilities, and protocol-specific threats.
Threat Modeling & Risk Assessment: Analyze application designs and threat models to discover potential weaknesses before testing begins.
Vulnerability Identification.
Reporting & Communication: Clearly document findings, evidence, and remediation steps; present results to technical and non-technical stakeholders.
Collaboration: Work hand-in-hand with development, DevOps, and infrastructure teams to design secure applications and validate remediation efforts.
Security Best Practices: Stay up-to-date on the latest security trends, vulnerabilities, and exploitation techniques relevant to web and API environments.
Requirements
3+ years in penetration testing, with a focus on mobile, web applications, and APIs.
Hands-on experience with white box testing methodologies.
Strong understanding of web application architectures, authentication, and authorization mechanisms.
Familiarity with JavaScript, Python, Java, or other modern programming languages.
Experience reading and analyzing source code to identify security issues.
Proficiency with common penetration testing tools, Knowledge of secure coding standards and practices.
Excellent problem-solving and analytical skills.
Effective written and verbal communication.
Strong attention to detail and ability to work both independently and as part of a team.
QA Engineer developing E2E automation framework for web and mobile applications in healthcare. Ensuring quality and regulatory compliance in a hybrid work environment.
Quality Assurance Analyst at WGU monitoring QA processes and collaborating with stakeholders on Military Education benefits compliance. Managing audits, risk - based surveys, and mentoring colleagues.
Lead QA Automation Engineer at HFM developing automation strategies for trading systems. Focus on AI/ML adoption and mentoring a high - performing team in Larnaca, Cyprus.
Lead QA Automation Engineer at HFM overseeing testing for low - latency financial trading systems. Focused on AI/ML adoption in automation processes and team mentorship.
QA Engineer testing backend services and AI/ML applications at Evnek Technologies. Requires 5+ years experience and expertise in test automation and backend systems.
Quality Assurance Pharmacist role ensuring pharmaceutical lot releases and adherence to quality standards at DSM - Firmenich. Engaging in continuous improvement and regulatory compliance.
QA Tester and Business Process Analyst at Stefanini, a global company specialized in co - creating future solutions. Focus on software quality assurance and process optimization.
QA Engineer ensuring reliability and performance of Android - based POS systems at CompassX. Collaborating with teams to execute testing and support operations in a hybrid role.
Electrical Verification Engineer testing and validating Belimo electronic actuators and hydronic control valves. Focused on automation, verification, and ensuring product compliance with design requirements.
QA Game Tester assessing game functionality within a gaming - focused DevQA team at Magic Media. Collaborating with development teams to identify bugs and enhance playability.