Senior App Security Engineer & Pen Test Lead (Remote)

Sherwin-Williams Co.; United States; Remote; USD 140,000 - 190,000; Full time

Job summary

Sherwin-Williams Co. is seeking a Senior Application Security Engineer to plan and perform manual penetration testing on traditional and AI-enabled applications.

You will identify and validate security vulnerabilities, mentor team members, and develop scripts and tools to enhance testing capabilities. The role involves strategic planning, deployment of offensive security tooling, and collaboration with development teams to remediate risks.

Qualifications

• Bachelor's Degree (or foreign equivalent) required; 12+ years in IT/Business acceptable in lieu.
• 5+ years IT/cybersecurity experience.
• 5+ years in application security, including hands-on pentesting/assessments.

Responsibilities

• Plan and perform manual penetration testing of traditional and AI-enabled applications.
• Identify, exploit, validate, and document security vulnerabilities; provide remediation guidance.
• Develop scripts, automation, and custom tools to improve testing capabilities.
• Mentor and provide guidance to other Application Security team members.
• Communicate findings and risk to technical and non-technical stakeholders.
• Retest applications and validate remediation of findings.

Skills

Penetration testing

Automation scripting

Stakeholder communication

Offensive security

Team mentorship

Education

Bachelor's degree (or foreign equivalent)

12+ years IT/Business experience (alternative)

Tools

Python

PowerShell

Cloud security tooling

Job description

Sherwin-Williams Co. is seeking a Senior Application Security Engineer to plan and perform manual penetration testing on traditional and AI-enabled applications.

You will identify and validate security vulnerabilities, mentor team members, and develop scripts and tools to enhance testing capabilities. The role involves strategic planning, deployment of offensive security tooling, and collaboration with development teams to remediate risks.