Application Security Developer III

This is a fully remote position, open to applicants in United States.

📋 Description

• Assist in the Application Security Program by conducting application security assessments, analyzing security tool outputs, documenting security findings, creating proof-of-concept exploits, and engaging in software development.

• Execute application security assessments on web applications, web services, and mobile applications utilizing BurpSuite and various other tools.

• Evaluate and assess the exploitability of outputs from DAST and SAST tools.

• Document security findings along with proof-of-concept exploits and suggested remediation steps.

• Enhance and maintain DAST/SAST tools and associated processes.

• Conduct security-focused reviews of source code.

• Design and create software to support, automate, integrate, and enhance security tools and processes.

• Engage in solution design by offering security guidance and fostering awareness.

• Collaborate with software development teams to implement application security solutions, including Web Application Firewalls and OAuth/OIDC providers.

• Operate within a distributed team environment utilizing virtual communication.

• Execute additional job-related tasks as requested.

⛳️ Requirements

• A Bachelor of Science in Computer Science or Software Engineering, or equivalent relevant work experience.

• A minimum of five (5) years of experience in software development.

• Preferred experience in conducting application security testing.

• Preferred background in developing and designing n-tier applications with multi-tier architectures.

• Proficient in software development with languages such as JavaScript, Python, Golang, C#, PHP, Ruby, Java, PowerShell, and T-SQL.

• Comprehensive understanding of the HTTP protocol and web hosting platforms.

• Familiarity with basic networking concepts and network troubleshooting.

• Preferred knowledge of BurpSuite, ZAP, or other application security testing tools.

• Preferred familiarity with DAST and SAST products.

• Solid understanding of OAuth and OIDC protocols.

• Knowledgeable in operating systems including Windows, OSX, Linux, iOS, and Android.

• Capable of troubleshooting software issues.

• Extensive knowledge of common application vulnerabilities, including SQLi, XSS, CSRF, RCE, XXE, SSRF, and the OWASP Top 10.

• Understanding of the software development life cycle phases.

• Strong written and verbal communication abilities.

• Familiarity with configuration management tools, scripting, programming, and automated testing frameworks.

• Capacity to learn and comprehend new technologies.

• Possess analytical and problem-solving skills.

• Ability to prioritize and manage tasks independently as well as in a collaborative team setting.

• OSCP or OSWE certification is preferred.

🏝️ Benefits

• Potential bonus linked to company and individual performance.

• Comprehensive and substantial total rewards package.

• Support for employee total well-being.