Remote Senior App Sec Engineer & Ethical Hacker

Sherwin-Williams Co.; Cleveland (OH); Remote; USD 120.000 - 190.000; Vollzeit

Zusammenfassung

Sherwin-Williams is seeking a Senior Application Security Engineer to lead manual penetration testing of traditional and AI-enabled applications. You will develop scripts and tooling, mentor team members, and collaborate with developers to remediate vulnerabilities.

You will plan testing strategies, maintain knowledge of attack techniques, and communicate findings to stakeholders while supporting secure development and AI security practices. Remote work is available.

Qualifikationen

• Bachelor’s Degree (or foreign equivalent) or in lieu of a degree, at least 12 years in experience in IT or Business
• 5+ years IT and/or cybersecurity
• 5+ years of experience in application security, including hands-on penetration testing
• Advanced knowledge of web apps, APIs, and vulnerabilities
• Experience with SDLC and secure development practices
• Experience with AI architecture and model training processes
• Experience planning end-to-end penetration tests for cloud-native and modern apps
• Experience identifying, exploiting, validating, and documenting vulnerabilities
• Experience developing scripts or tools
• Experience communicating findings to technical and non-technical stakeholders
• Ability to work independently and with teams
• Experience mentoring less-experienced professionals
• Experience threat modeling and evaluating attack paths
• Must be legally authorized to work in the United States without sponsorship
• Must be at least eighteen (18) years of age

Aufgaben

• Plan application security assessments from requirements
• Develop testing strategies and plans based on architecture and risks
• Maintain knowledge of testing methodologies and attack techniques
• Research risks for traditional and AI-enabled apps
• Improve penetration testing methodologies and efficiency
• Plan and execute end-to-end penetration tests
• Identify, exploit, and document vulnerabilities
• Evaluate attack paths and app risks not found by automated tests
• Communicate findings and remediation recommendations
• Retest applications and verify remediation
• Provide guidance to other team members
• Track assessment status and remediation progress
• Create and maintain testing documentation and runbooks
• Mentor team members
• Participate in planning and knowledge-sharing
• Support secure development and AI security practices

Kenntnisse

Application security

Penetration testing

Scripting & automation

Threat modeling

Communication to stakeholders

Mentoring

Independent work

Team collaboration

Ausbildung

Bachelor’s Degree or foreign equivalent

12+ years IT/Business experience

Tools

Security testing tools

Automation scripting languages

Jobbeschreibung

Sherwin-Williams is seeking a Senior Application Security Engineer to lead manual penetration testing of traditional and AI-enabled applications. You will develop scripts and tooling, mentor team members, and collaborate with developers to remediate vulnerabilities.

You will plan testing strategies, maintain knowledge of attack techniques, and communicate findings to stakeholders while supporting secure development and AI security practices. Remote work is available.