Penetration Tester - Remote

Overview

Join Dev.Pro - a US-based outsourcing software development company that has been delivering exceptional software experience to clients since 2011. We invite a highly experienced Penetration Tester to join Dev.Pro for a short-term, project-based engagement. In this on-demand role, you’ll conduct a pentest for one of our clients, enhancing the security and resilience of their systems and applications. You’ll perform an in-depth vulnerability assessment, develop new tests based on emerging threats, and use your deep technical expertise in cybersecurity to provide insights that will help shape effective strategies for long-term protection.

In Short

• Complete a challenging, high-impact pentest project for a fintech client
• Grow your cybersecurity skills by solving security issues unique to the payments industry
• Enjoy remote work with a flexible schedule, balancing personal and professional commitments
• Work on a stable product with 7+ years in production, trusted by leading global brands
• Enhance your manual testing expertise with a focus on API testing
• Join a collaborative, supportive, and experienced team, working closely with a client who values team input

Requirements

• 4+ years of hands-on experience in penetration testing (web apps, APIs, backend systems)
• Proficiency in JavaScript and Node.js for secure code review
• Experience testing vulnerabilities in NoSQL databases, especially MongoDB
• Familiarity with containerization and Kubernetes
• Expertise in testing application business logic
• Solid understanding of network, application, and system security
• Experience with various penetration methodologies, tools, and frameworks
• Ability to document and communicate technical issues effectively
• Upper-Intermediate English level
• Attention to detail, strong decision-making skills

Benefits

• General understanding of the fintech domain, including common security challenges and industry regulations
• Certifications in penetration testing, offensive security, or ethical hacking