Penetration Testing Analyst Web API

Apply web, API, mobile, and infrastructure testing skills as a Penetration Testing Analyst at Sun Life in a hybrid environment. Use manual testing to validate enterprise security vulnerabilities.

Sun Life seeks a skilled Penetration Testing Analyst focused primarily on penetration testing delivery. You will test applications, infrastructure, and systems while gaining secondary exposure to Red Team activities. The work requires vulnerability validation, structured reporting, and practical remediation recommendations.

Key Responsibilities:

• Perform web, API, mobile, and infrastructure penetration testing
• Identify, exploit, and validate vulnerabilities using manual techniques
• Follow OWASP and established security testing methodologies
• Document root causes, business impact, risk ratings, and remediation
• Support retesting, reconnaissance, attack mapping, and Red Team exercises

Requirements:

• Bachelor’s degree in computer science or information security
• Two or more years of hands-on penetration testing experience
• Web application, API, and basic infrastructure testing experience
• Knowledge of authentication, access control, injection, and session flaws
• Burp Suite, Nmap, sqlmap, or similar tool experience

Bring manual testing, reporting, and vulnerability research skills to Sun Life’s enterprise penetration testing team.