Immediate need for a talented Penetration Tester -Web & API testing. This is a 12+ Months Contract opportunity with long-term potential and is located in John Creeks, GA (Hybrid). Please review the job description below and contact me ASAP if you are interested., * We are seeking an experienced Penetration Tester to assess the security of web applications and APIs, identify vulnerabilities, and provide actionable recommendations to strengthen the organization’s security posture.

• The ideal candidate will have hands-on experience conducting manual and automated penetration tests, validating security weaknesses, documenting findings, and collaborating with development and security teams to support remediation.
• Conduct manual and automated penetration testing of web applications and APIs, including REST and SOAP services.
• Identify, validate, and exploit application vulnerabilities to assess their potential business and security impact.
• Perform security testing aligned with the OWASP Top 10 and other industry-recognized application security standards.
• Utilize tools such as Burp Suite, OWASP ZAP, Postman, and other penetration testing tools to discover and validate vulnerabilities.
• Assess authentication, authorization, access controls, session management, input validation, and data protection mechanisms.
• Develop test cases, proof-of-concept demonstrations, and detailed reproduction steps for identified vulnerabilities.
• Prepare comprehensive penetration testing reports with risk ratings, technical findings, and remediation recommendations.
• Collaborate with application developers, architects, and security teams to validate fixes and prevent recurring vulnerabilities.
• Support continuous improvement of application security testing methodologies, tools, and processes.
• Communicate technical findings and security risks clearly to technical and non-technical stakeholders.

Penetration Testing, Application Programming Interface (API), Web Testing, Employee Benefits, Penetration Testing, Internet Application, Application Programming Interface (API), Computer Security, Security Analysis, Web Analytics, * Must Have’s : Strong experience with web application penetration testing and API penetration testing.

• Ability to work onsite in Johns Creek, GA, two days per week.
• Proven hands-on experience in penetration testing, application security, or offensive security.
• Strong experience with web application penetration testing and API penetration testing.
• Practical knowledge of REST APIs, SOAP services, HTTP/HTTPS, and common web application technologies.
• Proficiency with Burp Suite, OWASP ZAP, Postman, or comparable security testing tools.
• Strong understanding of the OWASP Top 10, common API vulnerabilities, authentication, authorization, and access-control weaknesses.
• Experience documenting vulnerabilities, assessing risk, and providing remediation guidance.
• Strong analytical, troubleshooting, written communication, and reporting skills.
• Ability to work onsite in Johns Creek, GA, two days per week.

Pay Range: $35 - $38/hour. Employee benefits include, but are not limited to, health insurance (medical, dental, vision), 401(k) plan, and paid sick leave (depending on work location).

Our client is a leading IT Industry and we are currently interviewing to fill this and other similar contract positions. If you are interested in this position, please apply online for immediate consideration.

Pyramid Consulting, Inc. provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.

By applying to our jobs you agree to receive calls, AI-generated calls, text messages, or emails from Pyramid Consulting, Inc. and its affiliates, and contracted partners. Frequency varies for text messages. Message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You can reply STOP to cancel and HELP for help. You can access our privacy policy here.

mor