Remote App Sec Engineer - Vulnerability Discovery

SRM Technologies; United States; Remote; USD 120,000 - 180,000; Part time

Job summary

Dropbox is seeking a Product Security Engineer (Contractor) to join the Product Security Engineering team, focusing on reducing security risk across our software. You’ll work with engineering and product teams throughout the SDLC, developing secure-by-default libraries and guidance for developers.

Responsibilities include triaging vulnerabilities, reviewing code changes, and driving remediation with engineering teams. Experience with SAST/DAST, AWS, and AI-assisted tooling is a plus.

Qualifications

• 3+ years of experience in application security engineering.
• Strong communication and relationship-building skills.
• Experience building and scaling Secure SDLC.
• Experience triaging vulnerabilities from multiple sources.
• Familiar with SAST/DAST/SCA and cloud environments (AWS).

Responsibilities

• Triage, validate, and prioritize vulnerabilities from various sources.
• Participate in on-call rotation for security incidents and reviews.
• Guide remediation with engineering teams to close findings.
• Review PRs and code changes for secure implementation.
• Analyze AI-generated findings to reduce false positives.
• Collaborate to improve vulnerability detection and remediation.
• Develop security tooling and automation to reduce manual effort.
• Track remediation progress and security metrics.
• Contribute to security docs and developer education.
• Administer vulnerability scanning tools and policies.
• Configure and maintain scanning tools and schedules.

Skills

Application security

Vulnerability management

Security tooling

Cross-functional collaboration

Communication

Tools

SAST

DAST

SCA

IaC scanning

Secrets detection

Cloud/AWS

Job description

Dropbox is seeking a Product Security Engineer (Contractor) to join the Product Security Engineering team, focusing on reducing security risk across our software. You’ll work with engineering and product teams throughout the SDLC, developing secure-by-default libraries and guidance for developers.

Responsibilities include triaging vulnerabilities, reviewing code changes, and driving remediation with engineering teams. Experience with SAST/DAST, AWS, and AI-assisted tooling is a plus.