Application Security Developer III

CareSource Management Services LLC; Dayton (OH); Hybrid; USD 94,000 - 165,000; Full time

Job summary

CareSource is seeking an Application Security Developer III to support the Application Security Program by testing applications, analyzing tool outputs, documenting findings, and developing proofs of concept and software to augment security tools.

The role involves testing web, mobile apps and services with BurpSuite, reviewing DAST/SAST outputs, and collaborating with development teams to integrate security controls such as WAFs and OAuth/OIDC.

Qualifications

• Bachelor of Science in computer science or software engineering or equivalent years of relevant work experience required
• Five (5) years software development experience
• Experience performing application security testing is preferred
• Experience developing and designing n-tier applications with multi-tier architectures is preferred

Responsibilities

• Perform application security testing against web applications, web services, and mobile applications using BurpSuite and other tools
• Analyze and determine exploitability of DAST and SAST output
• Report security findings including proof of concept exploit, and remediation steps
• Maintain and improve DAST/SAST tools, and processes
• Perform security focused source code reviews
• Design and develop software to support, automate, integrate, and augment security tools and processes
• Participate in solution design to provide security guidance and create awareness
• Work closely with software development teams to integrate application security solutions, i.e., Web Application Firewalls and Oauth/OIDC providers

Skills

JavaScript

Python

Go (Golang)

C#

PHP

Ruby

Java

PowerShell

T-SQL

OWASP Top 10

BurpSuite

ZAP

OAuth/OIDC

Windows

Linux

Education

Bachelor's degree in Computer Science or Software Engineering

Tools

BurpSuite

ZAP

Job description

Job Summary

The Application Security Developer III is responsible for supporting the Application Security Program through application security testing, analyzing security tool output, documenting security findings, producing proof of concept exploits, and software development.

Essential Functions

• Perform application security testing against web applications, web services, and mobile applications using BurpSuite and other tools
• Analyze and determine exploitability of DAST and SAST output
• Report security findings including proof of concept exploit, and remediation steps
• Maintain and improve DAST/SAST tools, and processes
• Perform security focused source code reviews
• Design and develop software to support, automate, integrate, and augment security tools and processes
• Participate in solution design to provide security guidance and create awareness
• Work closely with software development teams to integrate application security solutions, i.e., Web Application Firewalls and Oauth/OIDC providers
• Work in a distributed team environment where team members are spread across numerous locations and often communicate virtually
• Perform any other job-related instructions as requested

Education and Experience

• Bachelor of Science in the field of computer science or software engineering or equivalent years of relevant work experience required
• Five (5) years software development experience
• Experience performing application security testing is preferred
• Experience developing and designing n-tier applications with multi-tier architectures is preferred

Competencies, Knowledge and Skills

• Skilled in software development and working with javascript, python, golang, C#, php, ruby, java, powershell, and TSQL
• In depth understanding of the HTTP protocol, and web hosting platforms
• Understanding of basic networking and network troubleshooting
• Knowledge of Burpsuite, ZAP or other application security testing tools is preferred
• Knowledge of DAST and SAST products is preferred
• Good understanding of Oauth and OIDC
• Knowledge of Windows, OSX, Linux, iOS, Android operating systems
• Competent in software troubleshooting
• In depth understanding of common applications exploits (SQLI, XSS, CSRF, RCE, XXE, SSRF) and OWASP top 10
• Knowledge of specific phases of the software development life cycle
• Strong interpersonal skills including excellent written and verbal communication skills
• Knowledge of configuration management tools, scripting, programming and automated testing tool sets
• Flexible and adaptable in regards to learning and understanding new technologies
• Highly self-motivated and directed, technically proficient, highly logical with strong attention to detail
• Analytical and problem-solving abilities
• Ability to effectively prioritize and execute tasks while working both independently and in a team-oriented, collaborative environment
• Innovative and pioneering spirit

Licensure and Certification

• Offensive Security Certified Professional (OSCP) certification or Offensive Security Web Expert (OSWE) certification preferred

Working Conditions

General office environment; may be required to sit or stand for extended periods of time

Compensation

Compensation Range: $94,100.00 - $164,800.00

CareSource takes into consideration a combination of a candidate's education, training, and experience as well as the position's scope and complexity, the discretion and latitude required for the role, and other external and internal data when establishing a salary level.

In addition to base compensation, you may qualify for a bonus tied to company and individual performance.

Compensation Type (hourly/salary): Salary

We are highly invested in every employee’s total well-being and offer a substantial and comprehensive total rewards package.

Organization Level Competencies

• Fostering a Collaborative Workplace Culture
• Cultivate Partnerships
• Develop Self and Others
• Drive Execution
• Influence Others
• Pursue Personal Excellence
• Understand the Business

Additional Information

This job description is not all inclusive.

CareSource reserves the right to amend this job description at any time.

CareSource is an Equal Opportunity Employer. We are dedicated to fostering an environment of belonging that welcomes and supports individuals of all backgrounds.

#LI-GM1 Brand=CareSource

The CareSource mission is known as our heartbeat. Just as we support our members to be the best version of themselves, our employees are driven by our mission to create a better world for members, stakeholders and providers. We are difference-makers who combine compassionate hearts with our unique business expertise to make every opportunity count. Each claim, each phone call, each consumer-centric decision is a chance to change the world for one member, and our employees look for ways to do that every day. The challenge is, there is no one right way to be the difference and we're looking for people like you that will rewrite that definition every day. We do what it takes to form creative solutions that make our community and the world just a little better. Discover what it means to be #UniquelyCareSource.