Genesis10 is currently seeking a Security Engineer/Tester - Hybrid (3 days/week onsite) for a contract position with a Global Financial Institution located in Seattle, WA or Addison, TX. This is a 12+ month contract opportunity.
As a Security Engineer/Tester, you will perform authorized security testing on complex, large-scale, and highly critical applications. This role involves working within the development team to proactively identify security vulnerabilities (OWASP Top 10, SANS Top 25, CWE) early in the development lifecycle. You will act as a liaison between the information security team and development teams, helping to understand and remediate security issues. A passion for following the constantly changing threat landscape is essential.
Responsibilities:
Perform authorized security testing on highly complex and critical applications
Work independently and as part of a team in a fast-paced environment
Maintain awareness of various application security domains such as authentication, authorization, identity management, and cryptography
Present findings to leadership, management, and development teams to communicate risk and inform decisions on mitigations and controls
Requirements:
3+ years of experience in software development/testing with large-scale enterprise applications
Primary skills in manual and automated software testing
Deep understanding of web application technologies, web protocols (HTTP, HTTPS), and browser technologies
In-depth domain understanding of application security, including Identity and Access Management (IAM) and various authentication technologies (passwords, biometrics, OTP, digital certificates, PKI, FIDO U2F/Passkeys)
Proven expertise with security testing tools such as proxy tools (Fiddler), black box testing tools (Burp), and static code analysis tools
Deep understanding of application security vulnerabilities such as OWASP Top 10, SANS Top 25, and CWE
Bachelor's Degree in Computer Science or equivalent experience
Must be self-directed, able to work independently, and in a team-oriented environment
Desired skills:
Working experience with security technologies and standards like Single Sign-On (SSO) using SAML/OpenID and OAuth protocols
Good understanding of cryptographic algorithms and standards (Symmetric/Asymmetric crypto, digital signatures, JWS/JWE tokens, HSMs)
Understanding of security vulnerabilities related to cloud environments
Relevant security certifications
Understanding of Threat Modeling concepts and Secure Development Life Cycle processes
Familiarity with Mobile Application Security
Pay range: $57.18 - $65.18 per Hour
Only candidates available and ready to work directly as Genesis10 employees will be considered for this position.
If you have the described qualifications and are interested in this exciting opportunity, please apply!
Ranked a Top Staffing Firm in the U.S. by Staffing Industry Analysts for six consecutive years, Genesis10 puts thousands of consultants and employees to work across the United States every year in contract, contract-for-hire, and permanent placement roles. With more than 300 active clients, Genesis10 provides access to many of the Fortune 100 firms and a variety of mid-market organizations across the full spectrum of industry verticals.
For contract roles, Genesis10 offers the benefits listed below. If this is a perm-placement opportunity, our recruiter can talk you through the unique benefits offered for that particular client. Benefits of Working with Genesis10:
Access to hundreds of clients, most who have been working with Genesis10 for 5-20+ years.
The opportunity to have a career-home in Genesis10; many of our consultants have been working exclusively with Genesis10 for years.
Access to an experienced, caring recruiting team (more than 7 years of experience, on average.)
Behavioral Health Platform
Medical, D

Genesis Corp dba Genesis10

New Jobs

Quality Assurance Consultant