Application Security Engineer

PeopleLogic; United States; Remote; USD 90,000 - 130,000; Full time

Job summary

A leading company is seeking an Application Security Engineer to perform manual web application penetration testing and secure code reviews. The role involves identifying vulnerabilities, developing testing methods, and collaborating with cyber teams. Ideal candidates have strong programming skills in Java or C# and relevant ethical hacking certifications.

Qualifications

• 7+ years of experience in application security.
• Formal programming experience in Java or C# for at least 6 months.

Responsibilities

• Conduct manual application penetration tests on web applications and APIs.
• Perform manual security code reviews for languages like Java and .NET.

Skills

Manual Web Application Penetration Testing

Manual Secure Code Review

Identifying Vulnerabilities

Java

C#

Job description

Direct message the job poster from PeopleLogic

Talent Acquisition Specialist | Helping Tech Talent Across US Unlock Exciting Career Opportunities | Connecting Skilled Professionals with Leading...

Job Description:

Job Title: Application Security Engineer

Location: Remote

Duration: Full Time

Experience: 7+

Must Have:

• Solid expertise in manual web application penetration testing and manual secure code review.
• Experience performing manual test case scenarios.
• Ability to identify vulnerabilities in source code manually.

Not Looking For:

• Tool-dependent SAST and DAST resources.
• False positives review post SAST & DAST scans.

Key Areas:

• Perform manual security code reviews for languages like Java and .NET.
• Conduct manual application penetration tests on web applications, internal applications, APIs, networks, and mobile apps to discover vulnerabilities.
• Formal programming experience in Java or C# for at least 6 months is required.
• Develop new testing methods to identify vulnerabilities and entry points for attackers.

Good to Have:

• Ethical hacking certifications such as GWAPT, CREST, OSCP, OSWE, OSWA (not mandatory but preferred).
• Provide technical leadership and mentorship on penetration testing engagements.
• Communicate testing processes, techniques, and results effectively to technical and non-technical audiences.
• Collaborate with cyber teams to develop testing techniques, automation, and marketing collateral.

Seniority level

• Mid-Senior level

Employment type

• Full-time

Job function

• Information Technology

Industries

• Staffing and Recruiting

Referrals increase your chances of interviewing at PeopleLogic by 2x.

Get notified about new Application Security Engineer jobs in United States.