Note: The job is a remote job and is open to candidates in USA. TrustedSec is seeking a passionate information security professional to join their Software Security Team. The Application Security Consultant/Penetration Tester will assist clients in their software security needs, conducting assessments to identify vulnerabilities and improve security posture.
Responsibilities
- Conduct high-quality software security assessments with limited direct supervision
- Produce clear, technically accurate reports with testing walkthroughs, findings, and actionable recommendations for both technical and executive audiences
- Conduct client meetings, serve as the primary point of contact, and interface directly with clients during engagements
- Serve as a subject matter expert for other consultants/teams and regularly collaborate and contribute to furthering the education and progression of the skills and success of everyone at TrustedSec
- Maintain and build upon cybersecurity knowledge and skills by attending educational workshops and adopting a curious, continuous learning mindset
- Review publications, write blog posts, and potentially speak at conferences or other events
Skills
- The candidate must be legally authorized to work in the United States
- 2+ years' recent experience testing web applications, thick clients, APIs, and web services
- Proficiency in Burp Suite Professional
- 2+ years' recent experience performing both unauthenticated and authenticated application testing
- Advanced knowledge of manual application security testing, penetration testing methodologies, the OWASP Top 10, and the OWASP Testing Guide
- Strong understanding of common security controls and vulnerability testing techniques
- Passion for the Information Security industry, including keeping up to date with current software technologies, platforms, frameworks, and security issues
- Good time management skills and the ability to meet strict deadlines
- Demonstrated analytical and project management skills
- Excellent verbal and written communication skills including active listening and competence in presenting findings and recommendations to audiences with a range of technical understanding
- Ability to write technical documents with correct spelling, grammar, and punctuation and the ability to distill information for non-technical readers
- Thrive in a fast-paced, collaborative environment
- Ability to take initiative and work independently
- This is a remote position, allowing employees to work from their home residence within the United States
- Occasional travel to client sites or industry-related events is required
- Prolonged periods of sitting at a desk and working on a computer
- Ability to lift 15 pounds at times
- Travel up to 10% over the course of the calendar year
- Must reside in the United States
- Familiarity with AI/LLMs/frontier models/agentic tools/coding assistants
- Experience in mobile application testing
- Ability to conduct source code reviews in multiple programming languages
- Prior consulting experience
- Industry-recognized security certification(s) such as OSWE, Burp Suite Certified Practitioner, OSCP, etc
- Programming/software development experience/DBA/sysadmin/etc
- Experience maintaining high levels of privacy and OpSec for clients, including government agencies
Benefits
- Generous paid time off allowance
- Paid holidays
- Performance pay bonus program
Company Overview