Senior Penetration Tester / Application Security Engineer

We are looking for a Senior Penetration Tester / Application Security Engineer to perform a comprehensive security assessment of a web application and its APIs.

Project start: approximately Q4
Engagement: project-based / part-time
Main scope: Web Application & API Penetration Testing

Tech Stack
Drupal with significant custom development
Vue.js frontend and admin panel
Java backend
MongoDB
React Native for iOS and Android (mobile pentesting may be added later)
Responsibilities
Perform manual penetration testing of the web application and admin panel
Conduct API security testing
Test authentication, authorization, and role-based access controls
Identify business logic and security vulnerabilities
Assess the application against OWASP Top 10 and OWASP API Security risks
Prepare a professional penetration testing report with severity levels, vulnerability descriptions, evidence, and remediation recommendations

Requirements
Strong hands-on experience in Web Application and API Penetration Testing
Strong manual pentesting skills, not only automated scanning
Solid experience with Burp Suite and standard security testing tools
Experience testing custom-built web applications
Experience preparing professional pentest reports
Experience with Java, Drupal, or Vue.js is a plus
Mobile application pentesting experience is a plus, but not required