Senior App Security Engineer - Code Reviews & Pentests

Fortinet, Inc.; Sunnyvale (CA); On-site; USD 147,000 - 180,000; Full time

Benefits offered by this job

Medical, dental, vision insurance

401(k) retirement plan

Paid holidays, vacation, sick time

Job summary

Fortinet is seeking a Sr. Application Security Engineer to join the Corporate Information Security team.

You will be a technical expert performing security reviews across Fortinet applications, educate engineers, and handle externally reported vulnerabilities. You will drive static/dynamic testing programs, advise on SDLC security, and lead security initiatives while collaborating with a global distributed team to share knowledge, strengthen defenses, and protect assets across Fortinet’s

Qualifications

• 5+ years of work experience as an Information Security Researcher or Engineer.
• 3+ years auditing source code or programming in Java, .NET, Python or JavaScript.
• Strong understanding of OWASP TOP 10 vulnerabilities and API security risks.
• Strong understanding of cloud-native architecture, microservices, containerization, secure deployment.
• Proven experience in application penetration testing and security code review.
• Familiarity with CI/CD, DevSecOps and secure SDLC practices.
• Knowledge of OAuth and JWT implementations.
• BS degree in Computer Science, Cyber Security, or related field.

Responsibilities

• Serve as an application security expert guiding internal teams.
• Perform code reviews, pen tests, and architectural reviews on Fortinet apps.
• Develop and communicate vulnerability mitigation strategies to developers.

Skills

Information Security

Code auditing

OWASP Top 10

API security

Cloud-native

Penetration testing

Security code review

CI/CD / DevSecOps

Threat modeling

OAuth / JWT

Education

BS degree in Computer Science or related field

Tools

SAST tools

DAST tools

IAST tools

SCA tools

Job description

Fortinet is seeking a Sr. Application Security Engineer to join the Corporate Information Security team.

You will be a technical expert performing security reviews across Fortinet applications, educate engineers, and handle externally reported vulnerabilities. You will drive static/dynamic testing programs, advise on SDLC security, and lead security initiatives while collaborating with a global distributed team to share knowledge, strengthen defenses, and protect assets across Fortinet’s