Web & API Penetration Tester

Experis Manpower Group is seeking an experienced Web Application & API Penetration Tester to join our security team. In this role, you will conduct comprehensive security assessments for diverse clients, identifying critical vulnerabilities and providing actionable recommendations to enhance their digital security posture.

Key responsibilities

• Perform end-to-end web application and API penetration testing engagements.
• Conduct manual security testing and rigorous vulnerability validation.
• Assess complex authentication, authorization, session management, and business logic controls.
• Prepare detailed technical reports and provide clear remediation recommendations.
• Present security findings and associated risks to clients and key stakeholders.

Requirements

• Minimum of 4 years of hands-on experience in penetration testing.
• Strong expertise in web application and API security testing methodologies.
• Practical proficiency with Burp Suite and other industry-standard offensive security tools.
• Solid understanding of the OWASP Top 10, authentication mechanisms, and common attack vectors.
• Experience with scripting languages such as Python, PowerShell, or Bash.
• Relevant certifications like OSCP, CRTP, CRTO, or CREST are considered a significant advantage.

What we offer

• Comprehensive Medicover healthcare package.
• Multisport card for physical activity.
• Access to a professional e-learning platform for continuous development.
• Group life insurance coverage.