Lead Web Application Penetration Tester

Job ID: 113828
Location: Charlotte, North Carolina  [On-Site]
Category: Infrastructure
Employment Type: Contract
Date Added: 10/27/2026
Apply Now
Back to Search

Apply Now

Fill out the form below to submit your information for this opportunity. Please upload your resume as a doc, pdf, rtf or txt file. Your information will be processed as soon as possible.


 
 
 
 
 
(Word, PDF, RTF, TXT)
⚠Notice: Job application forms are locked until Analytics cookies are accepted for fraud prevention tracking. Please click the cookie settings banner to unlock.
* Required field.

Role Summary
This position involves leading advanced security assessments for modern web applications and APIs. The candidate will perform comprehensive penetration testing to identify vulnerabilities related to application logic, authentication, authorization, session management, and API security. The role requires a high level of technical expertise, manual testing skills, and experience with security tools to uncover high-impact risks in complex systems.

Responsibilities

  • Lead and execute penetration tests targeting web applications, APIs, and associated services.
  • Test complex business workflows such as user onboarding, checkout processes, account recovery, role escalation, and transaction handling.
  • Conduct manual and automated security assessments using tools like Burp Suite, OWASP utilities, and other testing frameworks.
  • Analyze API security, including object-level authorization, function-level controls, mass assignment, and broken references.
  • Identify vulnerabilities in rate limiting, input validation, error handling, file uploads, and trust boundaries.
  • Map applications and perform reconnaissance to identify endpoints, parameters, hidden functionality, and exposed surfaces.
  • Test user roles, permissions, and privilege boundaries to identify privilege escalation issues.
  • Probe session management, token handling, and session invalidation processes for weaknesses.
  • Assess input handling for client-side and server-side validation issues, including edge cases and error-based disclosures.
  • Provide remediation advice and security feedback to application owners, developers, and stakeholders.

Qualifications

  • Proven experience in web application penetration testing.
  • Proficiency with Burp Suite and related offensive security tools.
  • Strong understanding of OWASP Top 10 and OWASP API Security Top 10.
  • Experience testing REST and GraphQL APIs.
  • In-depth knowledge of authentication, authorization, session management, cookies, and tokens.
  • Excellent report writing, communication, and remediation advisory skills.
  • Ability to work independently and lead security assessments from planning to delivery.
  • Knowledge of SAST, DAST, SCA, and API security tooling.
  • Relevant education, training, certifications, or equivalent practical experience.

Publishing Pay Range: $55.00 – $60.00 USD Hourly
This position is based in office and requires employee to work on-site.

About GDH:
At GDH, we believe in the power of people and the importance of caring. Our culture statement, “We care about people,” isn’t just a tagline – it’s the core of everything we do. GDH is a premier staffing and talent solutions company dedicated to helping businesses find the best talent and assisting job seekers in finding their dream jobs.

Who We Are:
GDH, founded in 2001, has grown into a leader in providing staffing solutions across various industries. We specialize in IT across several sectors, connecting top talent with leading enterprises. As a Best of Staffing firm recognized for excellence in client, employee, talent, and women’s services, we pride ourselves on our commitment to quality and service.

GDH Benefits

GDH offers a range of employee benefits that are designed to promote well-being and help maintain a healthy work-life balance. These comprehensive benefits cover various aspects of an employee’s life and aim to enhance their overall experience with the company. Our health benefits include three medical insurance options with access to KISx Card, Zero Card, and HealthJoy concierge services. Other plan offerings include dental, vision, life, disability, supplemental insurance, and pet insurance plans. Enjoy additional perks like holiday pay, 401(k) plan, direct deposit, an employee referral program, work-life balance benefits, a Wellbeats membership, a discounted gym membership program, and more!  For more detailed information on benefits, please go to GDH’s website under the tab for candidates.

GDH provides equal employment opportunities (EEO) to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, gender, sex (including pregnancy), sexual orientation, gender identity, national origin, age, disability, genetic information, marital status, ancestry, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable federal, state, and local laws. Applicants with disabilities who require an accommodation or assistance in applying and/or for interviewing, please contact our HR Department.

Please visit our notice of collection for California applicants.

Apply Now
View All Jobs

Similar Jobs

Senior Systems Engineer/Architect
Alexandria, Virginia  [Hybrid]
Role Summary This senior position involves designing, implementing, and managing enterprise endpoint management solutions with a focus on MECM and Adaptiva integration. The role requires expertise in deploying strategic configurations, optimizing content delivery, and enhancing system performance...

Lead/Sr BSA Data & Analytics
Houston, Texas  [On-Site]
Role Summary This position involves serving as a primary liaison between business stakeholders and the Data & Analytics team, focusing on translating business needs into data-driven solutions. The role requires a strong understanding of data analysis, visualization, and technical solutions to...

ROW Lease Payments Analyst
Houston, Texas  [On-Site]
Role Summary The Lease Payments Analyst supports the administration of land lease agreements, surface leases, and right-of-way agreements within an industrial environment. This role is responsible for reviewing contractual payment obligations, processing lease payments, maintaining accurate land...

Full Stack Angular Developer
Boston, Massachusetts  [Hybrid]
Role Summary The Full Stack Developer designs, develops, tests, and maintains secure, responsive web applications across both frontend and backend environments. This role collaborates with cross-functional Agile teams to deliver scalable, accessible, and maintainable solutions while following...

Senior Design Analyst
Bentonville, Arkansas  [On-Site]
Role Summary The Senior Design Analyst serves as a design coordination lead supporting physical security technology initiatives across a large-scale enterprise environment. This role manages design deliverables, project documentation, business and technical requirements, reporting, and stakeholder...