Remote Application Security Engineer III

CareSource; United States; Remote; USD 94,000 - 165,000; Full time

Job summary

CareSource seeks an experienced Application Security Developer III to strengthen its security program across web, mobile, and service-based systems. You will conduct security testing, analyze tooling outputs, and collaborate with distributed teams to embed security into software development.

The role covers developing security-focused applications, maintaining DAST/SAST tooling, and producing actionable reports with remediation steps for developers.

Qualifications

• Bachelor of Science in CS or software engineering or equivalent years of relevant work experience.
• Five (5) years of software development experience.
• Experience performing application security testing is preferred.

Responsibilities

• Conduct application security testing for web, mobile, and services using BurpSuite and other tools.
• Review and assess exploitability indicated by DAST and SAST outputs.
• Produce security reports with proof of concept exploits and remediation steps.
• Maintain and improve DAST/SAST tools and related processes.
• Perform security-focused source code reviews.
• Design and develop software that supports and augments security tools and processes.
• Provide security guidance in solution design and cross-team collaboration.
• Work with development teams to integrate WAFs and OAuth/OIDC providers.

Skills

Application security testing

Software development

Security tooling analysis

Distributed teams collaboration

Education

Bachelor of Science in Computer Science or Software Engineering

Tools

BurpSuite

ZAP

Web Application Firewall

OAuth/OIDC providers

Job description

CareSource seeks an experienced Application Security Developer III to strengthen its security program across web, mobile, and service-based systems. You will conduct security testing, analyze tooling outputs, and collaborate with distributed teams to embed security into software development.

The role covers developing security-focused applications, maintaining DAST/SAST tooling, and producing actionable reports with remediation steps for developers.