Remote Security Automation Engineer

Verizon; McLean (VA); Remote; USD 72,000 - 129,000; Full time

Benefits offered by this job

Health insurance

401(k) matching

Paid holidays

Paid time off

Tuition assistance

Parental leave

Job summary

Verizon is seeking a Dynamic Application Security Testing engineer to join the DAST team remotely. You will integrate security testing into CI/CD pipelines and help defend web, mobile apps and APIs from OWASP Top 10 threats.

You will write automation in Python, Bash, and Java, build containerized test environments with Docker and AWS, and partner with engineers to remediate vulnerabilities while supporting bug bounty and incident response programs.

Qualifications

• Bachelor's degree or 1+ year of work experience in security engineering.
• Experience integrating security tooling into CI/CD pipelines.
• Ability to explain vulnerabilities to engineers with non-security background.

Responsibilities

• Integrate dynamic analysis tools into CI/CD pipelines for continuous security testing.
• Write and maintain automation scripts in Python and Bash to scale security efforts.
• Leverage AI to enhance testing capabilities and triage bug bounty submissions.
• Deploy and manage containerized test environments using Docker and AWS.
• Collaborate with engineering teams to remediate OWASP Top 10 vulnerabilities.
• Support bug bounty programs and incident response activities.

Skills

OWASP Top 10

Burp Suite

OWASP ZAP

CI/CD pipelines

Jenkins

GitLab CI

Python

Bash

Docker

AWS

REST/GraphQL

Penetration Testing

DevSecOps

AI tooling

Education

Bachelor's degree

Tools

Burp Suite Professional

OWASP ZAP

Jenkins

GitLab CI

Docker

AWS

Job description

Verizon is seeking a Dynamic Application Security Testing engineer to join the DAST team remotely. You will integrate security testing into CI/CD pipelines and help defend web, mobile apps and APIs from OWASP Top 10 threats.

You will write automation in Python, Bash, and Java, build containerized test environments with Docker and AWS, and partner with engineers to remediate vulnerabilities while supporting bug bounty and incident response programs.