Aspiring Application Security Engineer — Web & API Defender

Charles Schwab; Omaha (NE); On-site; USD 70,000 - 90,000; Full time

Benefits offered by this job

401(k) with company match

Paid vacation and volunteering time

Paid parental leave

Tuition reimbursement

Health, dental, and vision insurance

Job summary

A major financial services firm is seeking an entry-level Application Security Analyst in Omaha, Nebraska. In this role, you will build security controls into software, support dynamic application security testing, and collaborate with developers to address vulnerabilities. Key qualifications include familiarity with OWASP Top 10, DAST workflows, and programming knowledge in Java and .NET. The firm promotes a hybrid work model and offers a competitive benefits package.

Qualifications

• Exposure to OWASP Top 10 concepts and examples.
• Hands-on familiarity with DAST workflows and tools.
• Understanding of API Security fundamentals and technologies.
• Programming knowledge in Java and .NET.
• Basic understanding of SDLC and DevSecOps.
• Ability to explain security findings clearly.

Responsibilities

• Perform and support DAST for web and API services.
• Identify common vulnerability categories and advise on secure patterns.
• Strengthen API security.
• Collaborate with developers to validate remediation.
• Integrate AppSec tooling into build pipelines.
• Document vulnerabilities and remediation steps.
• Monitor and coordinate actions during security test cycles.
• Contribute to continuous improvement of security processes.

Skills

OWASP Top 10 concepts

DAST workflows

API Security fundamentals

Java programming

C# programming

DevSecOps basics

Clear communication

Education

Bachelor’s Degree in Computer Science

Certifications (CEH, Security+, OSCP)

Tools

BURP Suite

Job description

A major financial services firm is seeking an entry-level Application Security Analyst in Omaha, Nebraska. In this role, you will build security controls into software, support dynamic application security testing, and collaborate with developers to address vulnerabilities. Key qualifications include familiarity with OWASP Top 10, DAST workflows, and programming knowledge in Java and .NET. The firm promotes a hybrid work model and offers a competitive benefits package.