Senior Application Security Engineer

Matlen Silver; Atlanta (GA); On-site; USD 120,000 - 160,000; Full time

Job summary

Matlen Silver is seeking a security engineer focused on API security to manage intake requests, risk assessments, and remediation across API, container, and application layers. You will work closely with development teams to collect detailed technical information for security reviews and to drive timely fixes.

Desired candidates have hands-on API security testing experience, proficiency with DAST/SAST tools, and familiarity with container security scanning.

Qualifications

• Hands-on experience with API security testing and vulnerability management.
• Strong knowledge of DAST and SAST tools.
• Familiarity with container security scanning tools and practices.
• Ability to coordinate across multiple development teams to drive remediation.

Responsibilities

• Manage new API security intake requests with documentation and risk assessment.
• Coordinate with development teams to gather technical details for security reviews.
• Track and ensure timely remediation and clarifications between security and development teams.
• Maintain and optimize security scanning schedules for APIs, containers, and applications.
• Perform DAST and SAST scans, analyze results, and drive remediation.
• Oversee container security assessments and ensure policy compliance.
• Document findings and communicate risks to technical and non-technical stakeholders.
• Support knowledge transfer from outgoing consultants and ensure continuity of security processes.
• Communicate security status and risk to cross-functional teams and leadership.

Skills

API security

DAST/SAST

Threat modeling

Communication

Security standards

Tools

Burp Suite

OWASP ZAP

Veracode

Checkmarx

Fortify

Docker

Kubernetes

Anchore

Trivy

Job description

-Manage new API security intake requests, ensuring proper documentation and risk assessment.

-Coordinate with development teams to gather additional technical details for security reviews.

-Track and ensure timely responses between security and development teams for remediation and clarifications.

-Maintain and optimize application security scanning schedules for APIs, containers, and applications.

-Perform and validate DAST (Dynamic Application Security Testing) and SAST (Static Application Security Testing) scans, analyze results, and drive remediation.

-Oversee container security assessments, ensuring compliance with organizational standards.

-Document findings, create actionable reports, and communicate risks effectively to technical and non-technical stakeholders.

-Support knowledge transfer from outgoing consultants and ensure continuity of security processes.

-Hands-on experience with API security testing and vulnerability management.

-Strong knowledge of DAST and SAST tools (e.g., Burp Suite, OWASP ZAP, Veracode, Checkmarx, Fortify).

-Familiarity with container security (e.g., Docker, Kubernetes, image scanning tools like Anchore or Trivy).

-Proven ability to manage security intake processes and coordinate across multiple development teams.

-Solid understanding of secure coding practices, OWASP Top 10, and API-specific security risks.

-Excellent communication and stakeholder management skills for cross-team collaboration.

-Ability to work independently and hit the ground running in a fast-paced environment.