Cyber Security Research Engineer 3 - Contingent
PTR Global
Charlotte, United States of America
3 days ago
Role details
Contract type
Permanent contract Employment type
Full-time (> 32 hours) Working hours
Regular working hours Languages
English Experience level
Intermediate Compensation
$ 146KJob location
Charlotte, United States of America
Tech stack
API
Software System Penetration Testing
Automation of Tests
Burp Suite
Computer Security
Fiddler (Software)
Mobile Application Software
Python
Open Web Application Security
PCI Data Security Standards
Web Applications
Webinspect
Software Security
GWAPT
Dynamic Application Security Testing
Job description
- Conduct application penetration testing across browser-based/web applications, APIs, and mobile applications, including authentication/authorization testing and business-logic abuse cases.
- Configure and tune automated tools to support testing, improve coverage, and accelerate discovery.
- Perform deep defect analysis by reproducing, validating, and safely demonstrating impact, including chained attack paths when applicable.
- Produce clear, reproducible technical reports with evidence and practical remediation guidance.
- Collaborate with application and security teams to ensure shared understanding of defects, prioritization, and remediation paths.
- Support continuous improvement of testing methodologies and processes leveraging industry standards and best practices.
- Communicate findings and risks clearly to technical and non-technical stakeholders.
- Participate in peer reviews of reports and share knowledge with team members.
Requirements
- 4+ years of Cyber Security Research experience or equivalent demonstrated through work, consulting experience, training, military experience, or education.
- 2+ years of hands-on application penetration testing experience, including manual testing beyond automated scanner results.
- 2+ years of Dynamic Application Security Testing (DAST) experience, including tool configuration/tuning and manual verification of findings.
- Advanced experience with testing tools such as Burp Suite, Invicti, WebInspect, and Fiddler.
- Strong knowledge of application security and common vulnerabilities (OWASP Top 10).
- Experience with scripting and automation (e.g., Python, Shell).
- Knowledge of security best practices and compliance standards (e.g., PCI DSS, GDPR).
- Excellent communication skills and the ability to collaborate effectively with cross-functional teams.
- Strong problem-solving and analytical skills.
- Security certifications such as OSCP, BSCP, GWAPT, GPEN, GXPN, or equivalent are a plus.
Benefits & conditions
At PTR Global, we understand the importance of your privacy and security. We NEVER ASK job applicants to:
- Pay any fee to be considered for, submitted to, or selected for any opportunity.
- Purchase any product, service, or gift cards from us or for us as part of an application, interview, or selection process.
- Provide sensitive financial information such as credit card numbers or banking information. Successfully placed or hired candidates would only be asked for banking details after accepting an offer from us during our official onboarding processes as part of payroll setup.
Pay Range: $XXX - $XXX
The specific compensation for this position will be determined by several factors, including the scope, complexity, and location of the role, as well as the cost of labor in the market; the skills, education, training, credentials, and experience of the candidate; and other conditions of employment. Our full-time consultants have access to benefits, including medical, dental, vision, and 401K contributions, as well as PTO, sick leave, and other benefits mandated by applicable state or localities where you reside or work.
About the company
About PTR Global: PTR Global is a leading provider of information technology and workforce solutions. PTR Global has become one of the largest providers in its industry, with over 5000 professionals providing services across the U.S. and Canada. For more information visit ;br>