Senior Application Security Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Design, manage, and enhance application security testing capabilities and workflows.

• Evaluate application risks and propose appropriate mitigations.

• Conduct application-layer security assessments of code across various languages and frameworks.

• Support application-layer penetration testing to uncover potential vulnerabilities.

• Offer application security guidance and mentorship to development teams.

• Collaborate with application development, DevSecOps, and information security teams.

⛳️ Requirements

• Over 5 years of experience in application security, encompassing manual and automated code reviews, manual penetration testing, dynamic application security testing, and false positive analysis.

• Proven experience in assessing risk using a standardized risk management framework.

• Proficient in developing automations or applications using Python, TypeScript, Java, or PowerShell.

• Experience in creating and sustaining reusable GitHub Actions workflows.

• Practical experience in a Kubernetes-based DevSecOps environment and knowledge of Kubernetes security best practices.

• Skilled in reading and analyzing code for security and design vulnerabilities.

• Familiar with web application security standards such as HTTP, OAuth, OIDC, and REST.

• Experience with cloud platforms like AWS and Azure.

• Eagerness to learn new skills and improve workflows utilizing AI tools.

• US citizenship with a willingness and capability to maintain a US Security Clearance.

• Competent in integrating security and data privacy measures into work processes.

• Bachelor’s degree in computer science or a related field.

• Recommended qualifications include proficiency in C#, Python, Bash/Shell, PowerShell, JavaScript, SQL, or Java.

• Awareness of AI-assisted coding practices and the security implications of AI-generated code.

• Hands-on experience interpreting findings from application penetration testing, code scanning, and open-source scanning tools.

• Understanding of layer 2–7 communication protocols, encoding and encryption techniques, and algorithms.

🏝️ Benefits

• Medical, dental, and vision benefits.

• Basic and supplemental life insurance for employees and their families.

• 401(k) and profit-sharing programs.

• Minimum accrual of 80 hours of vacation leave.

• Twelve paid holidays throughout the calendar year.

• Opportunities for personal and professional growth.