Talent.com
Consultant, Application Security Penetration Tester

Consultant, Application Security Penetration Tester

CoalfireChicago, IL, United States
job_description.job_card.variable_days_ago
serp_jobs.job_preview.job_type
  • serp_jobs.job_card.full_time
job_description.job_card.job_description

Coalfire Systems

Coalfire is an EEO employer. We celebrate diversity and are committed to respecting one another, embracing individual differences, and creating an inclusive environment for all employees.

About Coalfire

Coalfire is on a mission to make the world a safer place by solving our clients' hardest cybersecurity challenges. We work at the cutting edge of technology to advise, assess, automate, and ultimately help companies navigate the ever-changing cybersecurity landscape. We are headquartered in Chicago, Illinois with offices across the U.S. and U.K., and we support clients around the world.

But that's not who we are - that's just what we do. We are thought leaders, consultants, and cybersecurity experts, but above all else, we are a team of passionate problem-solvers who are hungry to learn, grow, and make a difference.

Coalfire's AppSec team is composed of highly specialized application security testers. Not only are we hackers, but trusted advisors, where true consultancy shines through. At Coalfire, we take pride in being a partner to our clients. On our AppSec team, you work individually, but also in large groups depending on engagements. Come join our fun team where you can showcase your abilities, deepen your technical skills, expand your knowledge, be mentored while mentoring others, and have a great time while doing it.

What You'll Do

  • Perform application security assessments using penetration testing, threat modeling, and code review techniques.
  • Identify and remediate security vulnerabilities in web applications, APIs, cloud environments, and enterprise systems.
  • Conduct API security testing (SOAP, REST, GraphQL) and evaluate authentication / authorization mechanisms.
  • Analyze network security controls, including firewalls, SSL / TLS, encryption, and VPN configurations.
  • Collaborate with development teams to integrate security into the Secure Development Life Cycle (SDLC).
  • Conduct code reviews across various languages to identify security flaws and vulnerabilities.
  • Work with cloud security testing methodologies and ensure compliance with security standards.
  • Provide clear, well-written reports with actionable recommendations.
  • Consult with clients to explain findings, address security concerns, and provide remediation guidance.
  • Support mentorship and knowledge sharing within the team.
  • Lead and support penetration testing projects from start to finish.
  • Contribute to thought leadership through blog posts, conference talks, and R&D initiatives.
  • Stay up to date with security policies, industry best practices, and emerging threats.

What You'll Bring

  • A sense of humor and a good collection of memes and GIFs!
  • Strong knowledge of OWASP Top 10 and ability to explain vulnerabilities and attack vectors.
  • Hands-on experience with web application security testing and exploits.
  • Proficiency in Linux, VMWare, and GitHub for security assessments.
  • Working knowledge of popular web technologies like .NET, Java EE, Node.js, Rails, or JavaScript.
  • Familiarity with code scanning and dynamic analysis tools.
  • Expertise in API security testing and protocol handling.
  • Experience working with cloud security principles (AWS, GCP, Azure).
  • Understanding of IAM policies and security configurations in cloud environments.
  • Strong problem-solving and critical-thinking skills.
  • Ability to work independently and collaborate with teams effectively.
  • Strong time management and ability to meet deadlines.
  • Excellent verbal and written communication skills - able to explain findings to technical and non-technical stakeholders.
  • Open to constructive feedback and continuous learning.
  • A passion for mentorship and knowledge sharing.
  • A client-centric mindset with a high level of professionalism and collaboration.
  • Bachelor's degree (four-year college or university) or equivalent combination of education and work experience.
  • Bonus Points

  • Experience with AWS security concepts (IAM, STS, security controls, serverless architectures).
  • Hands-on experience with AWS services like S3, SQS, SNS, Lambda, and API Gateway.
  • Familiarity with DevSecOps, CI / CD security, and infrastructure automation.
  • Experience in mobile security (iOS / Android) and IoT testing.
  • Deep understanding of network and host-based penetration testing methodologies.
  • AWS Cloud Practitioner
  • AWS Certified Security - Specialty
  • Offensive Security Certified Professional (OSCP)
  • The salary range listed is a reasonable estimate of the compensation range for this role based on national salary averages. The actual salary offer to the successful candidate will be based on job-related education, geographic location, training, licensure and certifications and other factors. You may also be eligible to participate in annual incentive, commission, and / or recognition programs.

    Why You'll Want to Join Us

    At Coalfire, you'll find the support you need to thrive personally and professionally. In many cases, we provide a flexible work model that empowers you to choose when and where you'll work most effectively - whether you're at home or an office.

    Regardless of location, you'll experience a company that prioritizes connection and wellbeing and be part of a team where people care about each other and our communities. You'll have opportunities to join employee resource groups, participate in in-person and virtual events, and more. And you'll enjoy competitive perks and benefits to support you and your family, like paid parental leave, flexible time off, certification and training reimbursement, digital mental health and wellbeing support membership, and comprehensive insurance options.

    At Coalfire, equal opportunity and pay equity is integral to the way we do business. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. Coalfire is committed to providing access, equal opportunity, and reasonable accommodation for individuals with disabilities in employment, its services, programs, and activities. To request reasonable accommodation to participate in the job application or interview process, our Human Resources team at HumanResourcesMB@coalfire.com.

    Bonus Points

    Why you'll want to join us

    Please see job description

    PI277928252

    serp_jobs.job_alerts.create_a_job

    Penetration Tester • Chicago, IL, United States

    Job_description.internal_linking.related_jobs
    • serp_jobs.job_card.promoted
    Penetration Testing Analyst

    Penetration Testing Analyst

    VirtualVocationsGary, Indiana, United States
    serp_jobs.job_card.full_time
    A company is looking for a Security Analyst, Penetration Testing.Key Responsibilities Perform technical testing against various targets, including network, web application, and social engineering...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_1_day
    • serp_jobs.job_card.promoted
    Pest Control Trainee

    Pest Control Trainee

    Quik-Kill Pest EliminatorsJoliet, IL, United States
    serp_jobs.job_card.full_time
    Pest Elimination Service Technician.Quik-Kill Pest Eliminators Protecting Homes Since 1929.Build a Career Delivering Exceptional Service. At Quik-Kill Pest Eliminators, we believe outstanding pest ...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_30
    • serp_jobs.job_card.promoted
    Penetration Tester - Cyber Security Supervisor

    Penetration Tester - Cyber Security Supervisor

    RSM US LLPChicago, IL, United States
    serp_jobs.job_card.full_time
    We are the leading provider of professional services to the middle market globally, our purpose is to instill confidence in a world of change, empowering our clients and people to realize their ful...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_variable_days
    • serp_jobs.job_card.promoted
    Senior Application Security Engineer

    Senior Application Security Engineer

    VirtualVocationsLincolnwood, Illinois, United States
    serp_jobs.job_card.full_time
    A company is looking for a Senior Engineer, App Security.Key Responsibilities Design and implement secure coding standards and tooling for application-layer security Conduct threat modeling, sec...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_30
    • serp_jobs.job_card.promoted
    Physical Penetration Tester

    Physical Penetration Tester

    ACL DigitalChicago, IL, United States
    serp_jobs.job_card.full_time
    Onsite at New York, NY - Must travel to 3 sites.Need to have network and wireless skills.Review of site blueprints and existing security policies for each location. Public information gathering abou...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_variable_days
    • serp_jobs.job_card.promoted
    Security Analyst

    Security Analyst

    VirtualVocationsNaperville, Illinois, United States
    serp_jobs.job_card.full_time
    A company is looking for a Security Analyst who is passionate about safeguarding systems, data, and people.Key Responsibilities Manage and monitor enterprise security tools to detect and respond ...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_30
    • serp_jobs.job_card.promoted
    Information Security Penetration Tester

    Information Security Penetration Tester

    VirtualVocationsChicago, Illinois, United States
    serp_jobs.job_card.full_time
    A company is looking for an Information Security Penetration Tester to identify and mitigate security risks across its digital landscape. Key Responsibilities Conduct comprehensive security assess...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_1_day
    • serp_jobs.job_card.promoted
    Senior Consultant, Penetration Tester - Compliance Security

    Senior Consultant, Penetration Tester - Compliance Security

    Coalfire SystemsChicago, IL, United States
    serp_jobs.job_card.full_time
    We celebrate diversity and are committed to respecting one another, embracing individual differences, and creating an inclusive environment for all employees. Coalfire is on a mission to make the ...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_1_day
    • serp_jobs.job_card.promoted
    • serp_jobs.job_card.new
    Program Consultant - Security Operations

    Program Consultant - Security Operations

    VirtualVocationsNaperville, Illinois, United States
    serp_jobs.job_card.full_time
    A company is looking for a Program Consultant - Security Operations.Key Responsibilities Update and maintain program documentation, including plans and risk registers Manage the program tracker ...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_variable_hours
    • serp_jobs.job_card.promoted
    Medical Device Security Specialist

    Medical Device Security Specialist

    VirtualVocationsGary, Indiana, United States
    serp_jobs.job_card.full_time
    A company is looking for a Cyber Security Specialist, Medical Device & IoMT Protection (Remote).Key Responsibilities Design, engineer, manage, and recommend improvements for Medical Device and Io...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_variable_days
    • serp_jobs.job_card.promoted
    • serp_jobs.job_card.new
    Epic Application Analyst Certification Required

    Epic Application Analyst Certification Required

    VirtualVocationsNaperville, Illinois, United States
    serp_jobs.job_card.full_time
    A company is looking for an Epic Application Analyst I, II, III, Tapestry Core Administration.Key Responsibilities Serve as the primary support contact for Tapestry Managed Care Administration ap...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_variable_hours
    • serp_jobs.job_card.promoted
    Application Security Engineer

    Application Security Engineer

    TEKsystemsChicago, Illinois, United States
    serp_jobs.job_card.full_time
    We're looking for a cyber security specialist to help validate penetration test results, contribute creative ideas to purple team and red team backlogs, and support the early phases of red team cam...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_1_day
    • serp_jobs.job_card.promoted
    • serp_jobs.job_card.new
    Security Clearance Required SCM Lead

    Security Clearance Required SCM Lead

    VirtualVocationsChicago, Illinois, United States
    serp_jobs.job_card.full_time
    A company is looking for a Fusion SaaS SCM Functional Lead.Key Responsibilities Provide customer service support by diagnosing and resolving complex functional and technical issues Implement and...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_variable_hours
    • serp_jobs.job_card.promoted
    Senior Consultant, Application Security

    Senior Consultant, Application Security

    Coalfire SystemsChicago, IL, United States
    serp_jobs.job_card.full_time
    We celebrate diversity and are committed to respecting one another, embracing individual differences, and creating an inclusive environment for all employees. Assess the security and compliance of...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_30
    • serp_jobs.job_card.promoted
    • serp_jobs.job_card.new
    JD Edwards Security Analyst

    JD Edwards Security Analyst

    VirtualVocationsLincolnwood, Illinois, United States
    serp_jobs.job_card.full_time
    A company is looking for a Security Analyst in JD Edwards.Key Responsibilities Define, implement, and maintain the role-based security model in JD Edwards EnterpriseOne 9.Manage users and roles i...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_variable_hours
    • serp_jobs.job_card.promoted
    Senior Application Security Manager

    Senior Application Security Manager

    VirtualVocationsNaperville, Illinois, United States
    serp_jobs.job_card.full_time
    A company is looking for a Senior Manager, Application Security to lead their Application Security program.Key Responsibilities Manage and grow the Application Security, Vulnerability Management,...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_variable_days
    • serp_jobs.job_card.promoted
    Consultant, Application Security Penetration Tester

    Consultant, Application Security Penetration Tester

    Coalfire SystemsChicago, IL, United States
    serp_jobs.job_card.full_time
    We celebrate diversity and are committed to respecting one another, embracing individual differences, and creating an inclusive environment for all employees. Coalfire is on a mission to make the ...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_variable_days
    • serp_jobs.job_card.promoted
    Cyber SDC - WAM Penetration Tester - Senior - Location OPEN

    Cyber SDC - WAM Penetration Tester - Senior - Location OPEN

    EYChicago, IL, United States
    serp_jobs.job_card.full_time
    At EY, we're all in to shape your future with confidence.We'll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go.Join EY and help ...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_variable_days