Static Application Security Tester/Penetration Tester
General Dynamics Information Technology19 hours ago
Remote, United StatesMid Level
Base Salary
$98k - $107k/yr
Responsibilities
- Evaluate application security throughout all phases of the software development life cycle.
- Perform security testing of web applications and REST APIs.
- Conduct Static Application Security Testing, Dynamic Application Security Testing, and third-party Software Composition Analysis.
- Analyze security issues and support identification, interpretation, and remediation of vulnerabilities.
- Define application security best practices with team members.
- Work with applications using varied programming languages and platforms.
Requirements
- Bachelor’s degree and 3+ years of hands-on application security testing experience with web applications and REST APIs.
- Ability to explain the OWASP Top 10, including impacts and resolutions.
- Beginner-level hands-on experience with SAST, DAST, and third-party SCA.
- Familiarity with reading and analyzing Java, JavaScript, or Scala.
- Ability to obtain a Federal Public Trust clearance.
- Established US residency for at least three of the last five years.
- Preferred: security certifications such as CEH, GWAPT, ECSA, OSCP, or LPT.
- Preferred: experience with SmartBear ReadyAPI, Nessus Vulnerability Scanner, Linux, governance/risk/compliance platforms, JIRA, or Confluence.
- Preferred: healthcare or CMS experience and Agile certifications such as SAFe Practitioner, SAFe Agilist, or CSM.
Benefits
- Fully remote work with a 40-hour scheduled work week and no travel required.
- Medical, dental, vision, health savings account, and 401(k) plan options with company match.
- Paid vacation, sick, personal, parental, military, bereavement, jury duty, and holiday leave.
- Up to 160 hours of paid family leave in a rolling 12-month period for eligible employees.
- Short- and long-term disability, life, accidental death and dismemberment, personal accident, critical illness, and business travel insurance offerings.
- Growth and internal mobility support, wellness packages, and an award-winning, military-friendly workplace.
Tech Stack
Categories
About General Dynamics Information Technology
General Dynamics Information Technology (GDIT) delivers enterprise IT, systems integration, cybersecurity, cloud, and software engineering services to U.S. federal agencies, including defense and intelligence organizations. It provides contract-based professional and managed services ranging from network operations and unified communications to training and simulation. GDIT is a business unit of General Dynamics (NYSE: GD) and is headquartered in Falls Church, Virginia.