Talent.com
Consultant, Application Security Penetration Tester

Consultant, Application Security Penetration Tester

Coalfire SystemsChicago, Illinois, United States
job_description.job_card.variable_days_ago
serp_jobs.job_preview.job_type
  • serp_jobs.job_card.full_time
job_description.job_card.job_description

Coalfire Systems

Coalfire is an EEO employer. We celebrate diversity and are committed to respecting one another, embracing individual differences, and creating an inclusive environment for all employees.

About Coalfire

Coalfire is on a mission to make the world a safer place by solving our clients' hardest cybersecurity challenges. We work at the cutting edge of technology to advise, assess, automate, and ultimately help companies navigate the ever-changing cybersecurity landscape. We are headquartered in Chicago, Illinois with offices across the U.S. and U.K., and we support clients around the world.

But that's not who we are - that's just what we do.

We are thought leaders, consultants, and cybersecurity experts, but above all else, we are a team of passionate problem-solvers who are hungry to learn, grow, and make a difference.

Coalfire's AppSec team is composed of highly specialized application security testers. Not only are we hackers, but trusted advisors, where true consultancy shines through. At Coalfire, we take pride in being a partner to our clients. On our AppSec team, you work individually, but also in large groups depending on engagements. Come join our fun team where you can showcase your abilities, deepen your technical skills, expand your knowledge, be mentored while mentoring others, and have a great time while doing it.

What You'll Do

  • Perform application security assessments using penetration testing, threat modeling, and code review techniques.
  • Identify and remediate security vulnerabilities in web applications, APIs, cloud environments, and enterprise systems.
  • Conduct API security testing (SOAP, REST, GraphQL) and evaluate authentication / authorization mechanisms.
  • Analyze network security controls, including firewalls, SSL / TLS, encryption, and VPN configurations.
  • Collaborate with development teams to integrate security into the Secure Development Life Cycle (SDLC).
  • Conduct code reviews across various languages to identify security flaws and vulnerabilities.
  • Work with cloud security testing methodologies and ensure compliance with security standards.
  • Provide clear, well-written reports with actionable recommendations.
  • Consult with clients to explain findings, address security concerns, and provide remediation guidance.
  • Support mentorship and knowledge sharing within the team.
  • Lead and support penetration testing projects from start to finish.
  • Contribute to thought leadership through blog posts, conference talks, and R&D initiatives.
  • Stay up to date with security policies, industry best practices, and emerging threats.

What You'll Bring

  • A sense of humor and a good collection of memes and GIFs!
  • Strong knowledge of OWASP Top 10 and ability to explain vulnerabilities and attack vectors.
  • Hands-on experience with web application security testing and exploits.
  • Proficiency in Linux, VMWare, and GitHub for security assessments.
  • Working knowledge of popular web technologies like .NET, Java EE, Node.js, Rails, or JavaScript.
  • Familiarity with code scanning and dynamic analysis tools.
  • Expertise in API security testing and protocol handling.
  • Experience working with cloud security principles (AWS, GCP, Azure).
  • Understanding of IAM policies and security configurations in cloud environments.
  • Strong problem-solving and critical-thinking skills.
  • Ability to work independently and collaborate with teams effectively.
  • Strong time management and ability to meet deadlines.
  • Excellent verbal and written communication skills - able to explain findings to technical and non-technical stakeholders.
  • Open to constructive feedback and continuous learning.
  • A passion for mentorship and knowledge sharing.
  • A client-centric mindset with a high level of professionalism and collaboration.
  • Bachelor's degree (four-year college or university) or equivalent combination of education and work experience.
  • Bonus Points

  • Experience with AWS security concepts (IAM, STS, security controls, serverless architectures).
  • Hands-on experience with AWS services like S3, SQS, SNS, Lambda, and API Gateway.
  • Familiarity with DevSecOps, CI / CD security, and infrastructure automation.
  • Experience in mobile security (iOS / Android) and IoT testing.
  • Deep understanding of network and host-based penetration testing methodologies.
  • AWS Cloud Practitioner
  • AWS Certified Security - Specialty
  • Offensive Security Certified Professional (OSCP)
  • The salary range listed is a reasonable estimate of the compensation range for this role based on national salary averages. The actual salary offer to the successful candidate will be based on job-related education, geographic location, training, licensure and certifications and other factors. You may also be eligible to participate in annual incentive, commission, and / or recognition programs.

    Why You'll Want to Join Us

    At Coalfire, you'll find the support you need to thrive personally and professionally. In many cases, we provide a flexible work model that empowers you to choose when and where you'll work most effectively - whether you're at home or an office.

    Regardless of location, you'll experience a company that prioritizes connection and wellbeing and be part of a team where people care about each other and our communities. You'll have opportunities to join employee resource groups, participate in in-person and virtual events, and more. And you'll enjoy competitive perks and benefits to support you and your family, like paid parental leave, flexible time off, certification and training reimbursement, digital mental health and wellbeing support membership, and comprehensive insurance options.

    At Coalfire, equal opportunity and pay equity is integral to the way we do business. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. Coalfire is committed to providing access, equal opportunity, and reasonable accommodation for individuals with disabilities in employment, its services, programs, and activities. To request reasonable accommodation to participate in the job application or interview process, our Human Resources team at .

    Bonus Points

    Why you'll want to join us

    Please see job description

    PI277928252

    serp_jobs.job_alerts.create_a_job

    Penetration Tester • Chicago, Illinois, United States

    Job_description.internal_linking.related_jobs
    • serp_jobs.job_card.promoted
    Senior Security Architect - SAP

    Senior Security Architect - SAP

    Blue Star Partners LLCWaukegan, IL, US
    serp_jobs.job_card.full_time
    Senior Security Architect - SAP.Hours over 40 will be paid at time and a half.W-2 only, no visa sponsorships or subcontracting. The Senior Architect - SAP will serve as the primary liaison between f...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_30
    • serp_jobs.job_card.promoted
    Security Operations Center (SOC) - Information Security Analyst

    Security Operations Center (SOC) - Information Security Analyst

    Top Talent LLCSchaumburg, IL, United States
    serp_jobs.job_card.full_time
    Security Operations Center (SOC) - Information Security Analyst.Award-Winning, $50B Publicly Traded Company.Hybrid - Chicagoland Area (Onsite 3-4 Days / Week). Join an award-winning, publicly traded c...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_variable_days
    • serp_jobs.job_card.promoted
    Penetration Tester - Cyber Security Supervisor

    Penetration Tester - Cyber Security Supervisor

    RSM US LLPChicago, IL, United States
    serp_jobs.job_card.full_time
    We are the leading provider of professional services to the middle market globally, our purpose is to instill confidence in a world of change, empowering our clients and people to realize their ful...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_variable_days
    • serp_jobs.job_card.promoted
    Security Account Executive

    Security Account Executive

    Active Alarm CompanyLake Zurich, IL, US
    serp_jobs.job_card.full_time
    Active Alarm Company has been a trusted provider of integrated electronic security solutions for over 60 years.We serve commercial, multi-family, educational, healthcare, and recreational markets, ...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_30
    • serp_jobs.job_card.promoted
    Survey Taker : Earn up to $25 per survey (Remote)

    Survey Taker : Earn up to $25 per survey (Remote)

    Earn HausZion, IL, United States
    serp_jobs.filters.remote
    serp_jobs.job_card.full_time +1
    Looking for people to participate in taking online surveys for Fortune 500 brands.All you need to do is complete online surveys by sharing your opinion. You will help influence brand decisions on se...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_30
    • serp_jobs.job_card.promoted
    Penetration Tester

    Penetration Tester

    Manpower Group Inc.Chicago, IL, United States
    serp_jobs.job_card.permanent +1
    Jefferson Wells is seeking Penetration Testers!.Penetration Testing consultants are needed to partner with our clients to perform security vulnerability assessments. Engagements may include an indiv...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_30
    • serp_jobs.job_card.promoted
    Manager - Penetration Tester

    Manager - Penetration Tester

    RSM US LLPChicago, IL, United States
    serp_jobs.job_card.full_time
    We are the leading provider of professional services to the middle market globally, our purpose is to instill confidence in a world of change, empowering our clients and people to realize their ful...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_variable_days
    • serp_jobs.job_card.promoted
    Senior Security Engineer (Remote)

    Senior Security Engineer (Remote)

    AbbVieNorth Chicago, IL, US
    serp_jobs.filters.remote
    serp_jobs.job_card.full_time
    AbbVie's mission is to discover and deliver innovative medicines and solutions that solve serious health issues today and address the medical challenges of tomorrow. We strive to have a remarkab...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_30
    • serp_jobs.job_card.promoted
    Senior Consultant, Application Security Penetration Tester

    Senior Consultant, Application Security Penetration Tester

    Coalfire SystemsChicago, IL, United States
    serp_jobs.job_card.full_time
    We celebrate diversity and are committed to respecting one another, embracing individual differences, and creating an inclusive environment for all employees. Coalfire is on a mission to make the ...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_30
    • serp_jobs.job_card.promoted
    Physical Penetration Tester

    Physical Penetration Tester

    ACL DigitalChicago, IL, United States
    serp_jobs.job_card.full_time
    Onsite at New York, NY - Must travel to 3 sites.Need to have network and wireless skills.Review of site blueprints and existing security policies for each location. Public information gathering abou...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_variable_days
    • serp_jobs.job_card.promoted
    Senior Security Architect - SAP

    Senior Security Architect - SAP

    Blue Star Partners, LLCWaukegan, IL, United States
    serp_jobs.job_card.full_time
    Senior Security Architect - SAP.Hours over 40 will be paid at time and a half.W-2 only, no visa sponsorships or subcontracting. The Senior Architect - SAP will serve as the primary liaison between f...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_30
    • serp_jobs.job_card.promoted
    Senior Consultant, Penetration Tester - Compliance Security

    Senior Consultant, Penetration Tester - Compliance Security

    Coalfire SystemsChicago, IL, United States
    serp_jobs.job_card.full_time
    We celebrate diversity and are committed to respecting one another, embracing individual differences, and creating an inclusive environment for all employees. Coalfire is on a mission to make the ...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_variable_days
    • serp_jobs.job_card.promoted
    Security Engineer (Remote)

    Security Engineer (Remote)

    AbbVieNorth Chicago, IL, United States
    serp_jobs.filters.remote
    serp_jobs.job_card.full_time
    AbbVie's mission is to discover and deliver innovative medicines and solutions that solve serious health issues today and address the medical challenges of tomorrow. We strive to have a remarkable i...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_variable_days
    • serp_jobs.job_card.promoted
    Consultant, Application Security Penetration Tester

    Consultant, Application Security Penetration Tester

    CoalfireChicago, IL, United States
    serp_jobs.job_card.full_time
    We celebrate diversity and are committed to respecting one another, embracing individual differences, and creating an inclusive environment for all employees. Coalfire is on a mission to make the wo...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_variable_days
    • serp_jobs.job_card.promoted
    Senior Consultant, Application Security Penetration Tester

    Senior Consultant, Application Security Penetration Tester

    CoalfireChicago, IL, United States
    serp_jobs.job_card.full_time
    We celebrate diversity and are committed to respecting one another, embracing individual differences, and creating an inclusive environment for all employees. Coalfire is on a mission to make the wo...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_variable_days
    • serp_jobs.job_card.promoted
    Application Security Engineer

    Application Security Engineer

    TEKsystemsChicago, Illinois, United States
    serp_jobs.job_card.full_time
    We're looking for a cyber security specialist to help validate penetration test results, contribute creative ideas to purple team and red team backlogs, and support the early phases of red team cam...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_1_day
    • serp_jobs.job_card.promoted
    Senior Consultant, Application Security

    Senior Consultant, Application Security

    Coalfire SystemsChicago, IL, United States
    serp_jobs.job_card.full_time
    We celebrate diversity and are committed to respecting one another, embracing individual differences, and creating an inclusive environment for all employees. Assess the security and compliance of...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_30
    • serp_jobs.job_card.promoted
    Security Engineer (Remote)

    Security Engineer (Remote)

    BioSpace, Inc.North Chicago, IL, United States
    serp_jobs.filters.remote
    serp_jobs.job_card.full_time
    AbbVie's mission is to discover and deliver innovative medicines and solutions that solve serious health issues today and address the medical challenges of tomorrow. We strive to have a remarkable i...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_variable_days
    • serp_jobs.job_card.promoted
    Consultant, Application Security Penetration Tester

    Consultant, Application Security Penetration Tester

    Coalfire SystemsChicago, IL, United States
    serp_jobs.job_card.full_time
    We celebrate diversity and are committed to respecting one another, embracing individual differences, and creating an inclusive environment for all employees. Coalfire is on a mission to make the ...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_variable_days
    • serp_jobs.job_card.promoted
    Cyber SDC - WAM Penetration Tester - Senior - Location OPEN

    Cyber SDC - WAM Penetration Tester - Senior - Location OPEN

    EYChicago, IL, United States
    serp_jobs.job_card.full_time
    At EY, we're all in to shape your future with confidence.We'll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go.Join EY and help ...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_variable_days