Senior Application Security Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Execute security assessments utilizing SAST, DAST, and SCA tools to pinpoint vulnerabilities within applications.

• Conduct code reviews and offer secure coding advice to development teams.

• Establish and sustain GitHub Advanced Security, encompassing secret scanning and code scanning.

• Collaborate with Engineering teams to triage and rectify identified vulnerabilities.

• Facilitate CI/CD security integration and automation.

• Review and secure API implementations, emphasizing GraphQL security.

• Keep security documentation up to date.

• Balance security requirements with business objectives.

• Manage several security assessments concurrently.

• Assist in ensuring compliance with NIST CSF, NIST 800-53, SOC 2, and PCI DSS frameworks.

⛳️ Requirements

• A bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related discipline.

• 5-8 years of experience in application security or a related security domain.

• Practical coding experience and the ability to review code across various programming languages.

• Professional experience with SAST tools (e.g., GHAS).

• Professional experience with DAST tools (e.g., Burp Suite, OWASP ZAP).

• Professional experience with SCA tools (e.g., GHAS, Black Duck, WhiteSource).

• Familiarity with GitHub Advanced Security features.

• Strong knowledge of OWASP Top 10 and secure coding standards.

• Exceptional communication skills to convey security findings to both technical and non-technical stakeholders.

• Proficient in reviewing Python, JavaScript, Java, Go, and other contemporary programming languages.

• Development expertise in languages such as JS and TS.

• Familiarity with git.

• Experience with AWS; multi-cloud experience is advantageous.

• Experience with Jenkins, GitHub Actions, or similar CI/CD tools.

• Eligibility to work in the United States.

• Preferred: Experience in configuring Cloudflare WAF and Bot Management.

• Preferred: Security automation and scripting experience (Python, Go, or similar).

• Preferred: Contributions to the security community.

• Preferred: Experience in healthcare or regulated industries.

🏝️ Benefits

• Competitive salary.

• Equity compensation for full-time positions.

• Unlimited Paid Time Off (PTO).

• Company holidays.

• Quarterly mental health days.

• Comprehensive medical, dental, and vision health benefits.

• Parental leave.

• Employee Stock Purchase Program (ESPP).

• 401k benefits with employer matching contributions.

• Offsite team retreats.

• Flexible/remote work options.