Senior Application Security Engineer

Galent; United States; Remote; USD 80,000 - 100,000; Full time

Job summary

An innovative firm is seeking a Talent Acquisition Specialist for IT & NON IT recruitment, focusing on security testing and ethical hacking. This remote role involves performing manual and automated security code reviews, penetration testing, and developing new testing techniques. Ideal candidates will have a strong background in Java and .NET, with a minimum of three years of experience using various application security tools. Join a forward-thinking team that values technical leadership and collaboration, where your contributions will enhance security practices and mentor junior members. If you're passionate about cybersecurity and thrive in a dynamic environment, this opportunity is for you.

Qualifications

• Formal programming experience in Java/c# – at least 6 months.
• Minimum three years of recent experience with application security tools.

Responsibilities

• Perform manual and automated security code reviews and penetration tests.
• Create new testing methods to identify vulnerabilities in applications.

Skills

Java

.NET

Ethical Hacking

Security Testing

Penetration Testing

Tools

AppScan

NetsSparker

Acunetix

Checkmarx

Veracode

BurpSuite

OWASP ZAP

Kali Linux

Job description

Direct message the job poster from Galent

Talent Acquisition Specialist - United States | Canada - IT & NON IT Recruitment

Contract

Remote

Responsibilities:

Mandatory

• Perform manual security code review against common programming languages (Java, .NET)
• Perform automated testing of running applications and static code (SAST, DAST)
• Perform manual application penetration tests on one or more of the following to discover and exploit vulnerabilities: web applications, internal applications, APIs, internal and external networks, and mobile applications
• Formal programming experience is a must in Java/c# – at least 6 months
• Create new testing methods to identify vulnerabilities and entry points that attackers may use to exploit applications, networks, and systems

Good to Have:

• One or more major ethical hacking certifications not required but preferred; GWAPT, CREST, OSCP, OSWE, OSWA
• Provide technical leadership and advice to team members on penetration test engagements
• Converse with technical and non-technical audiences to articulate both testing processes, techniques and results
• Partner with the Cyber teams to develop new testing techniques, automation for testing and marketing collateral to support the practice and mentor junior and offshore team members on tools and techniques in performing tests
• Minimum three (3) years of recent experience working with application tools to perform security tests: AppScan, NetsSparker, Acunetix, Checkmarx, Veracode, BurpSuite, OWASP ZAP, Kali Linux, or equivalent

Seniority level

• Mid-Senior level

Employment type

• Contract

Job function

• Information Technology
• Industries
• Information Services