Jobgether · US
Application penetration tester for web applications and REST APIs in a federal healthcare program. Performs manual and automated pentesting with Burp Suite, secure code reviews of Java and Scala, and SAST/DAST/SCA analysis. Integrates security testing into CI/CD pipelines using Jenkins and GitHub.
This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for an Application Penetration Tester based in the United States.
We are seeking an experienced Application Penetration Tester to strengthen the security of web applications and REST APIs within a federal healthcare program. In this fully remote role, you will play a key part in identifying, assessing, and mitigating application-level security vulnerabilities. You will conduct comprehensive penetration tests, secure code reviews, and architecture assessments across applications built with technologies such as Java, Scala, and JavaScript. Using industry-leading tools and frameworks, you will help development teams address security risks and implement robust security practices. You will also contribute to integrating automated security testing into DevOps and CI/CD pipelines. This is an opportunity to make a meaningful impact on application security in a mission-critical federal environment.
How Jobgether works:
We use an
AI-powered matching process
to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.
We appreciate your interest and wish you the best!
Why Apply Through Jobgether?
Data Privacy Notice:
By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.
#LI-CL1