Security Engineer

Horizontal Talent; Brooklyn Park (MN); On-site; USD 120,000 - 160,000; Full time

Job summary

Horizontal Talent is seeking an experienced security engineer to lead end-to-end penetration testing of web applications and APIs in an enterprise environment. You will partner with engineering teams, communicate clear findings, and provide practical remediation guidance.

Responsibilities include planning tests, leveraging Burp Suite and Nmap, scripting in Python or Go, and mentoring peers as part of a broader security program. This on-site role in Minnesota offers growth in a dynamic team.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, or equivalent practical experience.
• 7+ years in cybersecurity with increasing responsibility in penetration testing.
• Experience performing full penetration tests on web applications and APIs.

Responsibilities

• Plan and execute penetration tests from scoping through exploitation, validation, and reporting.
• Assess web applications and APIs for vulnerabilities, including authentication, authorization, and injection issues.
• Use industry-standard testing tools such as Burp Suite and Nmap to identify and verify risks.
• Create clear, actionable documentation that helps engineering teams understand and remediate findings.
• Collaborate with technical teams to validate fixes and support remediation efforts.
• Develop scripts or lightweight automation in Python or Go to improve testing workflows.
• Contribute to security efforts across mobile, hardware/embedded systems, or third-party platforms when applicable.
• Support risk identification through threat modeling and pre-deployment review activities.

Skills

Penetration testing

Web app security

Burp Suite

Nmap

Python or Go scripting

Documentation & reporting

Collaborative work with engineering

Education

Bachelor’s degree in Computer Science/Cybersecurity or equivalent

Tools

Burp Suite

Nmap

Job description

Join a dynamic security engineering opportunity focused on protecting modern web applications and APIs in an enterprise environment. This role offers the chance to lead end-to-end penetration testing efforts, partner with engineering teams, and help strengthen security through clear findings and practical remediation guidance.

Responsibilities

• Plan and execute penetration tests from scoping through exploitation, validation, and reporting.
• Assess web applications and APIs for common and advanced security vulnerabilities, including authentication, authorization, and injection issues.
• Use industry-standard testing tools such as Burp Suite and Nmap to identify and verify risks.
• Create clear, actionable documentation that helps engineering teams understand and remediate findings.
• Collaborate with technical teams to validate fixes and support remediation efforts.
• Develop scripts or lightweight automation in Python or Go to improve testing workflows.
• Contribute to security efforts across additional areas such as mobile, hardware/embedded systems, or third-party platforms when applicable.
• Support risk identification efforts through threat modeling and pre-deployment review activities.

Skills

• 5+ years of hands-on penetration testing experience, with a strong focus on web applications and APIs.
• Proven ability to perform full penetration tests independently and communicate results effectively.
• Deep understanding of web application security principles and common vulnerability classes, including OWASP Top 10.
• Advanced experience using Burp Suite, along with familiarity with Nmap and related exploitation tools.
• Ability to write scripts or automation in Python or Go to support technical work.
• Strong documentation skills with the ability to translate technical findings into clear remediation guidance.
• Experience working with engineering teams in a collaborative, solution-oriented way.
• Bachelor’s degree in Computer Science, Cybersecurity, or equivalent practical experience, plus 7+ years in cybersecurity with increasing responsibility in penetration testing.

Preferred Skills

• Experience testing mobile applications, hardware or embedded systems, or vendor/third-party platforms.
• Familiarity with PCI-related penetration testing requirements and compliance environments.
• Exposure to bug bounty programs, including triage, validation, and escalation.
• Experience mentoring other testers or providing technical guidance to peers.
• Strong understanding of networking and system architecture in large-scale environments.
• Interest in improving penetration testing processes, tooling, and automation.
• Relevant certifications such as OSCP, OSCE, OSWE, or CISSP.

Horizontal is committed to building an inclusive workplace where diverse perspectives are valued and everyone has the opportunity to contribute and succeed. We welcome candidates from all backgrounds and are dedicated to fostering a culture of equity, respect, and belonging.