Freddie Mac

Web Application Penetration Tester – Technical Lead (In Office or Remote)


Pay$150000.00 - $224000.00 / year
LocationMclean/Virginia
Employment typeFull-Time

What's your preference?

Apply with job updates
  • Job Description

      Req#: JR14716
      Employer Industry: Housing Finance

      Why consider this job opportunity:
      - Salary up to $224,000
      - Opportunity to participate in an annual incentive program
      - Comprehensive total rewards package including competitive compensation and market-leading benefits
      - Chance to contribute to making homeownership and rental housing more accessible and affordable across the nation
      - Collaborative work environment with opportunities for mentorship and professional development
      - Engage in innovative security practices and contribute to the overall strength of the organization's defenses

      What to Expect (Job Responsibilities):
      - Lead and perform web application penetration assessments, collaborating with stakeholders to scope engagements and provide tailored remediations
      - Proactively search for vulnerabilities in web applications, web APIs, and cloud environments
      - Work with other Red Team members to integrate web application security into broader threat emulation scenarios
      - Develop and maintain scripts, tools, and methodologies to enhance processes and capabilities
      - Provide mentorship and technical guidance to less experienced team members

      What is Required (Qualifications):
      - 8-10 years of relevant experience in web application penetration testing
      - One or more technical certifications: OSWA, OSWE, Burp Suite Certified Practitioner, eWPT, eWPTX
      - Ability to critically examine web applications to identify, exploit, and remediate vulnerabilities
      - Solid understanding of related web technologies and infrastructure
      - In-depth knowledge of secure development practices and security frameworks

      How to Stand Out (Preferred Qualifications):
      - Experience with web-related public research (advisories, disclosures)
      - Previous Bug Bounty or vulnerability disclosure experience
      - Proficiency in at least one scripting or programming language (Python, JavaScript, C#, Java)

      #HousingFinance #InformationSecurity #PenetrationTesting #CareerOpportunity #CompetitivePay

      We prioritize candidate privacy and champion equal-opportunity employment. Central to our mission is our partnership with companies that share this commitment. We aim to foster a fair, transparent, and secure hiring environment for all. If you encounter any employer not adhering to these principles, please bring it to our attention immediately.
      We are not the EOR (Employer of Record) for this position. Our role in this specific opportunity is to connect outstanding candidates with a top-tier employer.
  • About the company

      The Federal Home Loan Mortgage Corporation, commonly known as Freddie Mac, is a publicly traded, government-sponsored enterprise, headquartered in Tysons Corner, Virginia.

Notice

Talentify is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or protected veteran status.

Talentify provides reasonable accommodations to qualified applicants with disabilities, including disabled veterans. Request assistance at accessibility@talentify.io or 407-000-0000.

Federal law requires every new hire to complete Form I-9 and present proof of identity and U.S. work eligibility.

An Automated Employment Decision Tool (AEDT) will score your job-related skills and responses. Bias-audit & data-use details: www.talentify.io/bias-audit-report. NYC applicants may request an alternative process or accommodation at aedt@talentify.io or 407-000-0000.