AppSec Engineer, Software Security & Pen Testing

SysLogic, Inc.; Town of Brookfield (WI); On-site; USD 80,000 - 110,000; Full time

Benefits offered by this job

Health Care Plan (Medical, Dental & Vision)

Retirement Plan (401k)

Life Insurance (Basic, Voluntary & AD&D)

Paid Time Off (Vacation, Sick & Public Holidays)

Family Leave (Maternity, Paternity)

Long Term Disability

Training & Development

Work Life Balance

Strong employee focused culture

Job summary

A technology solutions company in Wisconsin is seeking a Security Engineer (Software Focus) to identify and mitigate security vulnerabilities. The ideal candidate has over 5 years of experience in application security, strong knowledge of web application vulnerabilities, and expertise in pen testing tools. Responsibilities include conducting security assessments, implementing secure coding practices, and providing training to development teams. This is a full-time role requiring occasional travel for client visits and training sessions.

Qualifications

• 5+ years of experience in application security or related role.
• Experience creating enterprise-based applications using Microsoft stack.
• Familiarity with security frameworks like OWASP and NIST.

Responsibilities

• Conduct security assessments and penetration testing.
• Identify and prioritize security vulnerabilities for remediation.
• Provide training on secure development principles.

Skills

Web application security vulnerabilities

Pen testing processes

Secure coding practices

Excellent problem-solving skills

Strong communication skills

Education

Bachelor's degree in computer science

Tools

Qualys

BurpSuite

Snyk

SCA

Job description

A technology solutions company in Wisconsin is seeking a Security Engineer (Software Focus) to identify and mitigate security vulnerabilities. The ideal candidate has over 5 years of experience in application security, strong knowledge of web application vulnerabilities, and expertise in pen testing tools. Responsibilities include conducting security assessments, implementing secure coding practices, and providing training to development teams. This is a full-time role requiring occasional travel for client visits and training sessions.