Security Engineer & Tester — Onsite in Seattle

Apex Systems; Seattle (WA); On-site; USD 87,000 - 90,000; Full time

Benefits offered by this job

Medical insurance

401K with company match

Employee stock purchase program

Job summary

Everforth Apex Systems is seeking a Security Engineer/Tester to perform authorized security testing on complex, large-scale applications in Seattle. You will collaborate with developers to identify vulnerabilities early and communicate risk to leadership.

The role requires hands-on testing, knowledge of IAM and authentication technologies, and experience with tools like Burp, Fiddler, and static analyzers. Onsite work 3 days per week.

Qualifications

• 3+ years of experience in software development or testing with large-scale enterprise applications.
• Proficient in manual and automated testing.
• Deep knowledge of web application technologies, HTTP/HTTPS, and browser tech.
• Experience with IAM and authentication technologies.
• Experience with security testing tools such as Fiddler, Burp, and static code analysis tools.
• Bachelor's degree in Computer Science or equivalent experience.

Responsibilities

• Perform authorized security testing on complex and critical applications.
• Work with development teams to identify security vulnerabilities early in the SDLC.
• Act as liaison between InfoSec and development teams to remediate issues.
• Present findings to leadership and engineering teams to inform mitigations.
• Stay current with evolving threat landscape and vulnerabilities.

Skills

Manual testing

Automated testing

Web technologies

IAM & authentication

Security testing tools

OWASP Top 10

Education

Bachelor's degree in Computer Science or equivalent experience

Tools

Fiddler

Burp Suite

Static code analysis

Job description

Everforth Apex Systems is seeking a Security Engineer/Tester to perform authorized security testing on complex, large-scale applications in Seattle. You will collaborate with developers to identify vulnerabilities early and communicate risk to leadership.

The role requires hands-on testing, knowledge of IAM and authentication technologies, and experience with tools like Burp, Fiddler, and static analyzers. Onsite work 3 days per week.