Senior Web Application Penetration Tester

# Senior Web Application Penetration Tester (Marketplace) We are looking for an experienced **Penetration Tester** to perform a comprehensive security assessment of a modern web marketplace application before production release. ## Technology Stack * Frontend: Next.js * Hosting: Vercel * Backend: Supabase (PostgreSQL, Authentication, Storage, REST APIs) * Authentication: * Google OAuth * Supabase Authentication * Third-Party Integrations: * UPGlobal CRM * PayPal * CardNet Payment Gateway ## Scope of Work The engagement should include security testing of: * Authentication and authorization * Session management * REST API security * OWASP Top 10 vulnerabilities * Business logic vulnerabilities * IDOR and privilege escalation * Input validation and injection attacks * Security configuration of Supabase and Vercel * Security of third-party integrations * HTTP security headers, CORS, and TLS configuration ## Deliverables * Executive summary * Detailed technical report with findings and proof of concept (PoC) * CVSS severity rating for each finding * Risk assessment and remediation recommendations * Final penetration testing report ## Requirements * Proven experience performing web application penetration testing. * Strong knowledge of the OWASP Web Security Testing Guide and OWASP Top 10. * Experience testing modern JavaScript applications and REST APIs. * Experience with cloud-native applications (Supabase, Firebase, or similar) is a plus. * Relevant certifications (OSCP, PNPT, eJPT, CEH, CREST, or similar) are preferred. ## Proposal When submitting your proposal, please include: * A brief summary of your relevant experience. * Similar projects you have completed. * Sample pentest reports (redacted if necessary). * Your estimated timeline. * Your hourly rate or fixed-price quote.