Application Security Engineer: Threat Modeling & API/CI-CD

Staffing Spot, Inc.; Dallas (TX); Presencial; USD 110 000 - 160 000; Tempo integral

Resumo da oferta

Staffing Spot, Inc. is seeking an Application Security Engineer to conduct assessments, pen tests, and secure code reviews for web, mobile, and API apps. The role emphasizes identifying OWASP Top 10 and API security gaps and guiding remediation.

Responsibilities include integrating security testing into CI/CD pipelines, threat modeling, and working with development teams to remediate vulnerabilities while supporting ISO/NIST/PCI considerations as applicable.

Qualificações

• Strong understanding of web application security and API security.
• Knowledge of OWASP Top 10 and testing methodologies.
• Experience with SAST, DAST, SCA, and vulnerability management tools.

Responsabilidades

• Conduct application security assessments, vulnerability assessments, and penetration testing of web apps, mobile apps, and APIs.
• Perform secure code reviews and remediation guidance.
• Identify and remediate OWASP Top 10 and API security issues.

Conhecimentos

Web application security

OWASP Top 10

SAST

DAST

SCA

Vulnerability management

Burp Suite

OWASP ZAP

CI/CD security

DevSecOps

REST APIs

OAuth 2.0

OpenID Connect

Python/Java/JS/Go

Ferramentas

Burp Suite

OWASP ZAP

SonarQube

Checkmarx

Veracode

Snyk

Descrição da oferta de emprego

Staffing Spot, Inc. is seeking an Application Security Engineer to conduct assessments, pen tests, and secure code reviews for web, mobile, and API apps. The role emphasizes identifying OWASP Top 10 and API security gaps and guiding remediation.

Responsibilities include integrating security testing into CI/CD pipelines, threat modeling, and working with development teams to remediate vulnerabilities while supporting ISO/NIST/PCI considerations as applicable.