Role & seniority

QA Tester (Contract)

Stack/tools

Web services, web applications, API, and mobile app testing for vulnerabilities
Vulnerability management and scanning: patch/config audits, host discovery scans, inventory upkeep
Tools: CheckMarx, Client WebInspect, Nmap, Metasploit, Nessus Security Center
Data security focus: PII/PCI data at rest

Top 3 responsibilities

Analyze scan results, remove false positives, and support remediation efforts
Coordinate scan activities with third parties, submit/internal/external scan requests, and obtain approvals
Conduct follow-up meetings with stakeholders and provide remediation support; generate scan reports

Must-have skills

Experience in vulnerability testing and tool management/administration
Proficiency with OS, web application, and mobile app vulnerability testing
Hands-on experience with the listed security tools (CheckMarx, WebInspect, Nmap, Metasploit, Nessus)

Nice-to-haves

Wireless penetration testing experience
POS device security assessments
Experience with host discovery scans and maintaining asset inventories

Location & work type

Washington, DC
Contract role

Notes

Role is positioned through Lensa for direct employer clients; not a staffing firm.

Full Description

Lensa is a career site that helps job seekers find great jobs in the US. We are not a staffing firm or agency. Lensa does not hire directly for these jobs, but promotes jobs on LinkedIn on behalf of its direct clients, recruitment ad agencies, and marketing partners. Lensa partners with DirectEmployers to promote this job for TWO95 International. Clicking "Apply Now" or "Read more" on Lensa redirects you to the job board/employer site. Any information collected there is subject to their terms and privacy notice.

Title: QA Tester

Location: Washington, DC

Position: Contract

Rate: $/Open

Description: -

Test web services, web application, API, mobile application for potential vulnerabilities, Wireless penetration testing and POS device security assessments Run patch / configuration audit scans, create scan report Periodically run Host Discovery Scans, web searches for Client related URLS, and maintain an accurate inventory Use commercial tools to check the PII / PCI data at rest

Requirements

Analyze the scan data, remove false positive, suggest remedy and support remediation efforts Coordinate scan efforts by third parties, submit internal and external scan request and obtain approvals Conduct follow-up meeting with Stakeholders, and provide support on remediation efforts Experience in Vulnerability testing tool management and administration

Tools expertise: CheckMarx, Client WebInspect, Nmap, Metasploit and Nessus Security Center Experience with strong vulnerability management (OS, web application and mobile app testing)

Note: If interested please send your updated resume to Gowri.Sankar@two95intl.com and include your rate requirement along with your contact details with a suitable time when we can reach you. If you know of anyone in your sphere of contacts, who would be a perfect match for this job then, we would appreciate if you can forward this posting to them with a copy to us.

We look forward to hearing from you at the earliest!

If you have questions about this posting, please contact support@lensa.com

QA Tester - Washington, DC

Full Description