AppSec Engineer I — Remote-Ready with Cloud Security Impact

LivePerson; United States; Remote; USD 120,000 - 180,000; Full time

Job summary

LivePerson, a global leader in enterprise conversations, seeks an AppSec engineer to test and secure LivePerson applications and environments across cloud and on‑premises. You will drive risk reduction, validate findings, and work with engineering and security teams to remediate and report on security issues.

The role requires hands-on testing experience, strong cloud knowledge (GCP), and the ability to communicate complex risks to stakeholders.

Qualifications

• Understanding of software security architecture and design.
• Broad experience of information security and AppSec testing techniques.
• Hands-on experience in an application security role with manual testing.
• Solid understanding of cloud environments, especially GCP, web protocols and vulnerabilities.
• Experience developing automation and exploitation scripts.

Responsibilities

• Manage and enhance application security tools (SCA, OSS scanners, DAST, etc.) and in-house automation.
• Validate vulnerabilities via code review and manual/semi-automatic tooling.
• Validate external penetration tests and coordinate remediation with stakeholders.
• Perform security penetration tests for web and mobile apps and infrastructure.
• Produce reports and metrics to support data-based decisions.
• Assist in updating Application Security procedures, standards and guidelines.
• Train and mentor team members and other LivePerson groups.

Skills

Software security

Vulnerability assessment

Code review

Communication

Security tooling

Tools

Burp Suite

Job description

LivePerson, a global leader in enterprise conversations, seeks an AppSec engineer to test and secure LivePerson applications and environments across cloud and on‑premises. You will drive risk reduction, validate findings, and work with engineering and security teams to remediate and report on security issues.

The role requires hands-on testing experience, strong cloud knowledge (GCP), and the ability to communicate complex risks to stakeholders.