Application Security Developer III

CareSource; USA; Remote; USD 120.000 - 180.000; Vollzeit

Zusammenfassung

CareSource is seeking a seasoned security-focused software engineer to test applications, review code, and help teams fix vulnerabilities across web, services, and mobile apps. You will build automation and collaborate with distributed teams to improve security tools and practices.

Responsibilities include hands-on testing with Burp Suite, documenting issues with PoCs, and advising on secure design. A CS or related degree and 5+ years of dev experience are required.

Qualifikationen

• Bachelor's degree in computer science or related field or equivalent experience.
• Minimum 5 years software development experience.
• Proficiency in languages such as JavaScript, Python, Go, C#, PHP, Ruby, Java, PowerShell, or T‑SQL.
• Strong knowledge of HTTP, web hosting, networking fundamentals, and OWASP risks.
• Familiarity with SDLC, debugging and automated testing; clear communication skills.
• Ability to analyze problems, learn new tech, and collaborate independently.

Aufgaben

• Test web, service, and mobile apps with Burp Suite and assess exploitability.
• Document security issues with PoCs and remediation guidance.
• Review source code for security concerns and improve testing tools and processes.
• Build software or automation to extend security tools and workflows.
• Advise on secure design and help teams integrate protections like WAFs and OAuth/OIDC.
• Coordinate with distributed colleagues and developers.

Kenntnisse

Software development

Security testing

Web/mobile security

Communication

Ausbildung

BS in CS or related

Tools

Burp Suite

ZAP

Static analysis tools

OWASP

Jobbeschreibung

Role overview

Support an application security program by testing software, assessing security findings, and helping development teams address vulnerabilities. The work covers web applications, services, and mobile applications, combining hands‑on security analysis with source review and software development to improve security tools and practices.

Responsibilities

• Test web, web service, and mobile applications with tools such as Burp Suite and assess whether findings can be exploited.
• Document security issues with proof‑of‑concept evidence and practical remediation guidance.
• Review source code for security concerns and help maintain or improve static and dynamic testing tools and processes.
• Build software and automation that integrates or extends security tools and workflows.
• Advise on secure solution design and help development teams integrate protections such as web application firewalls and OAuth or OpenID Connect providers.
• Coordinate effectively with colleagues and developers in a distributed team.

Requirements

• A computer science or software engineering degree, or equivalent relevant experience.
• At least five years of software development experience.
• Programming skills across relevant languages such as JavaScript, Python, Go, C#, PHP, Ruby, Java, PowerShell, or T‑SQL.
• Strong understanding of HTTP, web hosting, networking fundamentals, and application security weaknesses, including common OWASP risks.
• Familiarity with software development lifecycles, troubleshooting, and automated testing; clear written and verbal communication skills.
• Ability to analyze problems, prioritize work, learn new technologies, and contribute independently and collaboratively.

Nice to have

• Experience with application security testing, multi‑tier application design, Burp Suite or ZAP, static or dynamic analysis tools, and OAuth/OIDC. OSCP or OSWE certification is preferred.

Benefits and work setup

• The position is salaried and based in a general office environment, where sitting or standing for extended periods may be required. Additional compensation may include a performance‑based bonus, and a comprehensive benefits package is available.