DS
Manual Penetration Tester
Damco Solutions Inc
🇺🇸 United States
On-site
Mid level
7 months ago
- Penetration Testing
- iOS
- Android
- Burp Suite
- Postman
- Android Studio
- Kali Linux
- OWASP
- Azure Cloud
- Azure
- Python
- Bash
7 months ago
Location: Alpharetta, GA - Onsite
Duration: 6+ months (High Possibility of Extension)
Job Description:
Experienced Manual Penetration Tester to conduct in-depth security assessments and drive remediation across our application portfolio. This role focuses on hands-on testing across multiple platforms and close collaboration with development teams to remediate vulnerabilities.
Responsibilities:
- Perform advanced manual penetration testing ofweb applications, APIs, thick clients, mobile applications (iOS/Android), etc.
- Identify, validate, and exploit security vulnerabilities; provide clear risk assessments and actionable remediation guidance.
- Collaborate closely with application and engineering teams to explain findings, coordinate fixes, and track remediation efforts.
- Retest remediated vulnerabilities to confirm effective resolution and prevent regressions.
- Produce high-quality technical reports suitable for developers, architects, and security stakeholders.
- Expert-level hands-on experience with penetration testing tools such asBurp Suite, HCL AppScan, Postman, SOAPUI, Echo Mirage, Android Studio, and tools in Kali Linux.
- Strong knowledge of application security vulnerabilities and attack techniques across web, API, mobile, and thick client environments (e.g., OWASP Top 10, API security risks).
- Proven ability to perform manual testing beyond automated scanning.
- Experience assessing applications deployed inAzure cloud environments, including understanding ofAzure services and security controls.
- Strong automation experience; scripting skills in Python/bash are a plus.
- Excellent technical communication and collaboration skills.
Manual Penetration Tester · Damco Solutions Inc