Application Security Engineer - Remote

Overview

As an Application Security Engineer, you will perform application security testing on web applications, mobile applications, microservices, infrastructure code, and open source code in order to expose weaknesses in their design and/or configuration that make them susceptible to exploitation.

In Short

• Collaborate with internal teams to define the scope of application security testing activities.
• Plan and carry out application security testing in all phases of the software development life cycle.
• Create reports detailing discovered security issues and provide actionable recommendations.
• Assess discovered vulnerabilities and recommend solutions to mitigate security impacts.
• Communicate findings, risks, and recommendations to stakeholders.
• Consider the impact of testing on the business and its users.
• Articulate the business implications of unaddressed security vulnerabilities.

Requirements

• 3-5 years of experience in application security testing.
• Bachelor’s Degree in a related field or equivalent work experience.
• Relevant certifications such as C|ASE, GWEB, CSSLP.
• Experience testing web applications for OWASP Top Ten vulnerabilities.
• Understanding of the Software Development Life Cycle (SDLC).
• Experience in promoting secure coding practices.
• Strong communication skills for technical and non-technical audiences.
• Attention to detail and ability to prioritize tasks.
• Ethical integrity and ability to handle confidential information.
• Exceptional analytical and problem-solving skills.

Benefits

• Competitive compensation and immediate contribution.
• Inclusive benefits package including 401k and customizable benefits.
• Innovative culture valuing quality of work.
• Company-supported ambassador groups promoting diversity.
• Learning and development programs for career advancement.