Remote Security QA Engineer (DAST/SAST)

Intellibee; United States; Remote; USD 90,000 - 130,000; Full time

Job summary

IntelliBee is seeking a Security QA Engineer/Tester to perform dynamic and static security testing of web applications from a fully remote US-based team. You will identify vulnerabilities, validate fixes, and collaborate with development to embed security into the SDLC.

Candidates should have hands-on experience with DAST, SAST, and manual penetration testing, and may hold certifications like CEH or OSCP. Strong reporting and remediation guidance are essential.

Qualifications

• Requires hands-on experience with dynamic and static application security testing.
• Experience performing manual penetration testing on web apps.
• Ability to analyze findings and provide remediation guidance.

Responsibilities

• Perform manual and automated web application security assessments to identify weaknesses and validate resilience.
• Conduct DAST and SAST using industry-standard tools and methodologies.
• Execute secure code reviews across modern frameworks to identify vulnerabilities.
• Analyze, reproduce, and document vulnerabilities while eliminating false positives.
• Assess findings, determine risk, and provide remediation recommendations.
• Prepare detailed security assessment reports with evidence and actions.
• Collaborate with development teams to validate remediation of vulnerabilities.
• Provide guidance on secure architecture and SDLC best practices.
• Support vulnerability management activities and remediation tracking.
• Partner with stakeholders to embed security throughout the SDLC.
• Participate in security reviews, threat assessments, and risk evaluations.

Skills

DAST

Manual Penetration Testing

SAST

Job description

IntelliBee is seeking a Security QA Engineer/Tester to perform dynamic and static security testing of web applications from a fully remote US-based team. You will identify vulnerabilities, validate fixes, and collaborate with development to embed security into the SDLC.

Candidates should have hands-on experience with DAST, SAST, and manual penetration testing, and may hold certifications like CEH or OSCP. Strong reporting and remediation guidance are essential.