A web application pentesting developer is responsible for finding and exploiting vulnerabilities in web applications. They use a variety of tools and techniques to find these vulnerabilities, which can include manual testing, automated testing, and reverse engineering. Once a vulnerability is found, they will attempt to exploit it to gain access to sensitive data or take over the application.