Senior Offensive Security Engineer (Web & API)

About You You are an experienced offensive security professional with strong manual penetration testing expertise and a disciplined approach to testing production environments. You validate vulnerabilities through controlled exploitation attempts and produce clear, reproducible evidence. You are comfortable testing web applications, REST/SOAP APIs, and applications protected by enterprise SSO. You understand how to assess authorization across roles and accounts, identify exploitable weaknesses, and explain their impact. Note: This role operates under a contractor model for an initial period of 2 months , with the possibility of extension. You Bring to Applaudo the Following Competencies: Bachelor’s Degree in Computer Science, Cybersecurity, Software Engineering, or a related field is desired, or equivalent professional experience. 5+ years of hands on penetration testing experience, including 3+ years testing web applications and APIs in production environments. Manual web application penetration testing following OWASP WSTG and the OWASP Top 10. API security testing following the OWASP API Security Top 10, including BOLA/IDOR and broken function level authorization. SOAP and WSDL web service testing using Burp Suite, SoapUI or an equivalent tool. Burp Suite Professional as your primary tool, including extensions and custom payloads. Experience testing applications protected by SSO with OAuth 2.0, OpenID Connect and SAML on Microsoft Entra ID. Multi role and multi account aut