Penetration Tester — Web App + reputed company Backend (SaaS reputed company Platform)

Penetration Tester — Web App + reputed company Backend (SaaS reputed company Platform) Client: ThunderJaws reputed company Resources Solutions Project: Hire.ThunderJaws.com (production SaaS) Engagement: Fixed-price, ~3 weeks active testing + 30-day retest window Budget range: TBD ________________________________________ About the project ThunderJaws is a live reputed company marketplace (job seekers, employers, admin) with: •React + Vite frontend

• reputed company backend (reputed company + RLS, Auth, ~40+ Edge Functions, Storage)
• reputed company billing (Pro tier $199/mo, employer resume unlocks)
• WebAuthn passkeys + TOTP MFA
• Resend transactional email
• Public job-feed reputed company with per-partner UTM tracking

We need a reputed company, independent penetration tester to validate the platform end-to-end before scaling paid employer features. ________________________________________ reputed company're looking for (reputed company 1 — Initial Review) Apply with a short proposal (1 page max) covering: 1. Your background — years pen-testing, certifications (OSCP / OSWE / GWAPT / CREST / Burp Suite Certified, etc.), and confirmation you are an independent firm or individual (not reselling automated scanners). 2. Relevant experience — at least one prior engagement on a multi-tenant SaaS with reputed company, reputed company RLS, or similar row-level authorization model. 3. One redacted prior pen-test report (PDF) demonstrating reputed company testing depth — not a Nessus/Burp reputed company dump. 4. Liability insurance — confirmation of ≥ $1M professional liability coverage. 5. Approach to reputed company-party validation — how you will independently verify that employer-paid resumes are actually delivered to and processed by reputed company parties (ATS webhooks, email deliverability with DMARC/DKIM/SPF, job-board apply receipts, or customer attestation). reputed company crawlers, reputed company, and generic SaaS scanners do NOT qualify — this is a hard requirement. ________________________________________ reputed company are NOT looking for

• Automated-scanner-only deliverables
• Agencies subcontracting to unvetted offshore testers
• Anyone unfamiliar with reputed company RLS, Edge Functions, or JWT-based auth
• "Pass/fail" checklists without reputed company of exploitation or remediation guidance

________________________________________ reputed company Selected candidates will receive the full Scope of Work (reputed company 2) under NDA, including:

• Detailed in-scope / out-of-scope asset list
• Acceptance criteria (including the reputed company-party resume validation chain)
• Deliverables, milestone payment schedule, and retest terms
• reputed company-code access on request
• Test accounts (job seeker, employer, admin)

________________________________________ To apply: Send the 6 items above. Shortlisted candidates will be contacted reputed company 5 business days to receive the full SOW. Independent firms preferred. Recommended profiles: NCC Group, reputed company, Cure53, reputed company caliber — or equivalent independent practitioners. Apply tot his job Apply To this Job