Application Security Developer III

CareSource; United States; Remote; USD 94,000 - 165,000; Full time

Job summary

CareSource seeks an experienced Application Security Developer III to strengthen its security program across web, mobile, and service-based systems. You will conduct security testing, analyze tooling outputs, and collaborate with distributed teams to embed security into software development.

The role covers developing security-focused applications, maintaining DAST/SAST tooling, and producing actionable reports with remediation steps for developers.

Qualifications

• Bachelor of Science in CS or software engineering or equivalent years of relevant work experience.
• Five (5) years of software development experience.
• Experience performing application security testing is preferred.

Responsibilities

• Conduct application security testing for web, mobile, and services using BurpSuite and other tools.
• Review and assess exploitability indicated by DAST and SAST outputs.
• Produce security reports with proof of concept exploits and remediation steps.
• Maintain and improve DAST/SAST tools and related processes.
• Perform security-focused source code reviews.
• Design and develop software that supports and augments security tools and processes.
• Provide security guidance in solution design and cross-team collaboration.
• Work with development teams to integrate WAFs and OAuth/OIDC providers.

Skills

Application security testing

Software development

Security tooling analysis

Distributed teams collaboration

Education

Bachelor of Science in Computer Science or Software Engineering

Tools

BurpSuite

ZAP

Web Application Firewall

OAuth/OIDC providers

Job description

CareSource is seeking an experienced Application Security Developer III to support its Application Security Program. This role blends security testing, security tooling analysis, and hands-on software development to help improve application security across web, mobile, and service-based systems. You will work with distributed teams and collaborate closely with developers to integrate application security solutions.

What you’ll do

• Conduct application security testing for web applications, web services, and mobile applications using BurpSuite and other tools
• Review and assess the exploitability indicated by DAST and SAST outputs
• Produce security reports that include proof of concept exploits and clear remediation steps
• Maintain and improve DAST/SAST tools and related processes
• Perform security-focused source code reviews
• Design and develop software that supports, automates, integrates, and augments security tools and processes
• Participate in solution design to provide security guidance and raise awareness
• Partner with software development teams to integrate application security solutions such as Web Application Firewalls and Oauth/OIDC providers
• Work effectively in a distributed team environment with virtual communication across locations
• Complete any other job-related instructions as requested

Required qualifications

• Bachelor of Science in computer science or software engineering, or equivalent years of relevant work experience
• Five (5) years of software development experience
• Experience performing application security testing is preferred
• Experience designing and developing n-tier applications with multi-tier architectures is preferred

Technologies you may work with

• BurpSuite, DAST, SAST, ZAP
• JavaScript, Python, Go (Golang), C#, PHP, Ruby, Java, PowerShell
• TSQL, SQLI, XSS, CSRF, RCE, XXE, SSRF
• HTTP protocol, web hosting platforms
• OWASP Top 10
• OAuth, OIDC
• Operating systems: Windows, OSX, Linux
• Mobile: iOS, Android
• Web Application Firewalls

Certifications (preferred)

• Offensive Security Certified Professional (OSCP) or Offensive Security Web Expert (OSWE) certification

Compensation and work setup

Salary range: USD 94,100 - 164,800 per year.

Location: Remote.

Work environment: General office environment; may require sitting or standing for extended periods.