Penetration Tester - Application Security

Plano, TX

Full-time

Hybrid

Entry, Mid Level

Tyler Technologies is seeking a Penetration Tester to join the Application Security Team. This role involves conducting manual application security assessments, managing vulnerabilities, and collaborating with development teams to integrate security practices into the software development lifecycle.

Apply Now

Responsibilities

Conduct security assessments on networks, systems, and applications using manual and automated tools
Evaluate the threat, risk, and impact of potential vulnerabilities
Document and report potential vulnerabilities from security assessments
Coordinate with cross-functional teams to manage vulnerability tracking processes and support vulnerability remediation
Collaborate with teammates to learn, regularly share skills and foster team excellence
Stay current on evolving threats, trends, tools, and techniques
Perform other duties as assigned by the manager

Qualification

Required

Bachelor's degree in Cybersecurity, Systems Engineering, Computer Science, Information Systems Management or related field
At Least two years of related job experience in IT security
Foundational understanding of the following security concepts: Application vulnerability assessments, Common application and operating system weaknesses, Penetration testing methodologies, Perimeter security (firewalls, intrusion detection, etc.), Regulatory compliance standards: PCI-DSS, SOX, HIPAA, Secure development concepts
Basic programming knowledge of at least one language (e.g., C, C++, C#, Python, Java, J2EE)
Strong interpersonal, verbal, and written communication skills
Self-motivated with the ability to work independently and collaborate effectively in both team-based and remote environments
Strong organizational skills with the ability to manage a wide range of tasks and adapt to shifting priorities
Familiarity with common vulnerability databases and frameworks (e.g., OWASP Top 10, SANS Top 25, CVE, CVSS, CWE)
Experience with security testing tools (e.g., BurpSuite, Kali Linux, SQLMap, Metasploit, Nmap)
Currently hold or able to obtain offensive security certification(s) shortly upon hire (e.g., GWAPT, OSCP, CBBH, CPTS, GPEN, OSWA, GCPN)
Required to undergo and satisfactorily pass a fingerprint background check in accordance with CJIS requirements

Preferred

Experience with public-sector software products and cloud environments
Demonstrated contributions to the security community (e.g., public CVEs, bug bounty acknowledgments, open-source projects, blogs, publications)