> Markdown version of [/jobs/ext/4571970-penetration-tester-web-api-testing](https://www.wearedevelopers.com/jobs/ext/4571970-penetration-tester-web-api-testing). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Penetration Tester -Web & API testing

- **Company:** Pyramid Inc.
- **Location:** Johns Creek, GA, United States
- **Salary:** $72,800.0 - $79,040.0
- **Contract:** Permanent contract
- **Skills:** Application Programming Interfaces (APIs), Software System Penetration Testing, User Authentication, Burp Suite, Cyber Security, Data Validation, Hypertext Transfer Protocols (HTTP), Open Web Application Security, Session Management, Test Case, Web Analytics, Web Applications, Web Testing, Postman, Software Security, SOAPAPI, Bug Reporting, Restful APIs, Api Management
- **Published:** November 4, 2026
- **Apply:** https://www.careerbuilder.com/job-details/penetration-tester-web-api-testing-johns-creek-ga--d1c81c65-51be-4aec-850e-cb84ae447b51

## About the Role

Penetration Testing, Application Programming Interface (API), Web Testing, Employee Benefits, Penetration Testing, Internet Application, Application Programming Interface (API), Computer Security, Security Analysis, Web Analytics, * Must Have's : Strong experience with web application penetration testing and API penetration testing.

 * Ability to work onsite in Johns Creek, GA, two days per week.
 * Proven hands-on experience in penetration testing, application security, or offensive security.
 * Strong experience with web application penetration testing and API penetration testing.
 * Practical knowledge of REST APIs, SOAP services, HTTP/HTTPS, and common web application technologies.
 * Proficiency with Burp Suite, OWASP ZAP, Postman, or comparable security testing tools.
 * Strong understanding of the OWASP Top 10, common API vulnerabilities, authentication, authorization, and access-control weaknesses.
 * Experience documenting vulnerabilities, assessing risk, and providing remediation guidance.
 * Strong analytical, troubleshooting, written communication, and reporting skills.
 * Ability to work onsite in Johns Creek, GA, two days per week.

## Description

Immediate need for a talented Penetration Tester -Web & API testing. This is a 12+ Months Contract opportunity with long-term potential and is located in John Creeks, GA (Hybrid). Please review the job description below and contact me ASAP if you are interested., * We are seeking an experienced Penetration Tester to assess the security of web applications and APIs, identify vulnerabilities, and provide actionable recommendations to strengthen the organization's security posture.

 * The ideal candidate will have hands-on experience conducting manual and automated penetration tests, validating security weaknesses, documenting findings, and collaborating with development and security teams to support remediation.
 * Conduct manual and automated penetration testing of web applications and APIs, including REST and SOAP services.
 * Identify, validate, and exploit application vulnerabilities to assess their potential business and security impact.
 * Perform security testing aligned with the OWASP Top 10 and other industry-recognized application security standards.
 * Utilize tools such as Burp Suite, OWASP ZAP, Postman, and other penetration testing tools to discover and validate vulnerabilities.
 * Assess authentication, authorization, access controls, session management, input validation, and data protection mechanisms.
 * Develop test cases, proof-of-concept demonstrations, and detailed reproduction steps for identified vulnerabilities.
 * Prepare comprehensive penetration testing reports with risk ratings, technical findings, and remediation recommendations.
 * Collaborate with application developers, architects, and security teams to validate fixes and prevent recurring vulnerabilities.
 * Support continuous improvement of application security testing methodologies, tools, and processes.
 * Communicate technical findings and security risks clearly to technical and non-technical stakeholders.