Senior Application Security Engineer

PACCAR; Renton (WA); On-site; USD 90,000 - 141,000; Full time

Benefits offered by this job

401k with company match

Employee Stock Purchase Program (ESPP)

Pension plan

Generous PTO and holidays

Tuition reimbursement

Health, dental, and vision plans

FSA/HSA

Job summary

PACCAR’s Information Technology Division in Renton, WA seeks an Application Security Engineer to guide development teams in secure coding, perform code reviews, and lead security testing for applications and APIs. You will promote a shift-left security culture and strengthen governance across the SDLC.

Join a team that emphasizes collaboration, continuous improvement, and practical risk-based approaches to protect PACCAR’s software portfolio, using tools like Burp Suite, OWASP ZAP, Fortify, and

Qualifications

• Bachelor's degree in Computer Science, Information Systems, Software Engineering, Cybersecurity, or a related field.
• 5+ years of professional experience in application or software security, including hands-on work in secure code review, vulnerability assessment, threat analysis, or secure development practices.
• Hands-on experience with application security testing tools, including DAST platforms (e.g., Burp Suite, WebInspect, OWASP ZAP) and SAST/SCA tools (e.g., Fortify, Checkmarx, SonarQube).

Responsibilities

• Perform source code reviews using manual analysis and SAST tools to identify vulnerabilities.
• Execute web security assessments on websites, web applications, web services, and APIs using DAST tools.
• Review test results from automated security tools and remove false positives.
• Engage with development teams to provide vulnerability remediation support and guidance.
• Integrate secure coding practices and security tooling into CI/CD pipelines.

Skills

C#

JavaScript

Python

Web security

OWASP Top 10

SDLC

Git / GitHub

Azure DevOps

Education

Bachelor's degree in CS/IS/SE/Cybersecurity

Tools

Burp Suite

OWASP ZAP

Fortify

Checkmarx

SonarQube

Job description

PACCAR’s Information Technology Division in Renton, WA seeks an Application Security Engineer to guide development teams in secure coding, perform code reviews, and lead security testing for applications and APIs. You will promote a shift-left security culture and strengthen governance across the SDLC.

Join a team that emphasizes collaboration, continuous improvement, and practical risk-based approaches to protect PACCAR’s software portfolio, using tools like Burp Suite, OWASP ZAP, Fortify, and