IronNet Cybersecurity has an immediate opening for a Web Application Penetration Tester. This is a direct hire, full time position located in Fulton, MD.

We have a small, but growing security team and we're looking for someone who loves do break/fix/educate/repeat as much as we do.

The ideal candidate:

*Possesses SME-level knowledge of web application vulnerabilities, including an advanced understanding of web services, browser technology, common vulnerabilities, security best practices, automated assessment tools and manual testing techniques specific to web applications. *Has an advanced understanding of commercial and open source security tool strengths and weaknesses and ability to select, configure, troubleshoot and use the best “tool for the job”. *Has demonstrable experience manually exploiting or confirming vulnerabilities and eliminating false positives from results. *Has the ability to think creatively, to think critically, to analyze complex concepts, to articulate themselves clearly and concisely, and to track flaws to resolution. *Has a deep understanding of OWASP Top 10 and CWE 25, security solutions, and methodologies for conducting advanced security assessments, to include manual assessments and malicious user testing.

This position will integrate into the SDLC process, assisting and supporting the Security division by performing web application penetration testing, educating development teams on secure coding practices, and evaluating systems for potential weaknesses prior to deployment to production.

We are NOT looking for individuals who have general and/or broad penetration experience. You MUST have Web Application Penetration Testing experience to be considered for this role. Candidates must have excellent verbal, written and interpersonal communication skills with the ability to interact with all levels of personnel.

To apply, check out our ad here