Senior Application Security Engineer

CareSource Management Services LLC; Dayton (OH); Hybrid; USD 94,000 - 165,000; Full time

Job summary

CareSource is seeking an Application Security Developer III to support the Application Security Program by testing applications, analyzing tool outputs, documenting findings, and developing proofs of concept and software to augment security tools.

The role involves testing web, mobile apps and services with BurpSuite, reviewing DAST/SAST outputs, and collaborating with development teams to integrate security controls such as WAFs and OAuth/OIDC.

Qualifications

• Bachelor of Science in computer science or software engineering or equivalent years of relevant work experience required
• Five (5) years software development experience
• Experience performing application security testing is preferred
• Experience developing and designing n-tier applications with multi-tier architectures is preferred

Responsibilities

• Perform application security testing against web applications, web services, and mobile applications using BurpSuite and other tools
• Analyze and determine exploitability of DAST and SAST output
• Report security findings including proof of concept exploit, and remediation steps
• Maintain and improve DAST/SAST tools, and processes
• Perform security focused source code reviews
• Design and develop software to support, automate, integrate, and augment security tools and processes
• Participate in solution design to provide security guidance and create awareness
• Work closely with software development teams to integrate application security solutions, i.e., Web Application Firewalls and Oauth/OIDC providers

Skills

JavaScript

Python

Go (Golang)

C#

PHP

Ruby

Java

PowerShell

T-SQL

OWASP Top 10

BurpSuite

ZAP

OAuth/OIDC

Windows

Linux

Education

Bachelor's degree in Computer Science or Software Engineering

Tools

BurpSuite

ZAP

Job description

CareSource is seeking an Application Security Developer III to support the Application Security Program by testing applications, analyzing tool outputs, documenting findings, and developing proofs of concept and software to augment security tools.

The role involves testing web, mobile apps and services with BurpSuite, reviewing DAST/SAST outputs, and collaborating with development teams to integrate security controls such as WAFs and OAuth/OIDC.