HHS - Application Tester

cFocus Software IncorporatedRockville, MD

Apply with Sonara

Automate your job search with Sonara.

Submit 10x as many applications with less effort than one manual application.¹

Reclaim your time by letting our AI handle the grunt work of job searching.

We continuously scan millions of openings to find your top matches.

Overview

Schedule

Full-time

Career level

Senior-level

Remote

Job Description

cFocus Software seeks a Application Tester to join our program supporting the Department of Health and Human Services (HHS) This position is remote. This position requires the ability a Public Trust clearance.Qualifications:

Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, or related field.
Minimum 4–6 years of experience performing application testing or application security assessments.
Experience testing web applications, APIs, and cloud-based systems.
Working knowledge of OWASP Top 10 vulnerabilities and secure application design principles.
Experience validating automated vulnerability scan results.
Familiarity with federal vulnerability management and RMF processes.
Strong analytical, documentation, and communication skills.
Active GTAPT, CEH, or Security+ is preferred

Duties:

Perform application security testing including dynamic application security testing (DAST), functional testing, and validation testing.
Execute test cases against web applications, APIs, microservices, and cloud-hosted applications.
Identify application-level vulnerabilities including authentication, authorization, input validation, session management, and data exposure weaknesses.
Validate findings from automated scanning tools and identify false positives.
Support secure development lifecycle (SDLC) activities by testing applications before release.
Document application vulnerabilities, test results, and remediation recommendations.
Verify remediation through re-testing and evidence validation.
Support application penetration testing and red team activities as required.
Coordinate testing activities with developers, system owners, ISSOs, and AppSec engineers.
Ensure testing aligns with OWASP Top 10, NIST guidance, and HHS security standards.
Maintain application testing SOPs, workflows, and test scripts.
Support vulnerability management reporting and POA&M evidence development.

Automate your job search with Sonara.

Submit 10x as many applications with less effort than one manual application.

Apply with Sonara Apply manually