Senior Application Security Engineer - Remote

Nasuni Corporation; United States; Remote; USD 140,000 - 190,000; Full time

Benefits offered by this job

Best in class onboarding

“Take What You Need” PTO policy

Comprehensive health, dental andvision

Job summary

Nasuni is seeking a Senior Security Engineer focused on application security and pentesting to safeguard enterprise data infrastructure and SaaS products. You will identify vulnerabilities, conduct tests, guide secure design, and work with Engineering to remediate and retest findings across Nasuni products, including cloud services and AI-enabled capabilities.

You will independently drive complex assessments, coordinate testing initiatives, and influence risk-based priorities within Nasuni's

Qualifications

• Approx. 5+ years in security engineering with hands-on AppSec or pentesting.
• Demonstrated manual testing of web apps & APIs incl. auth issues.
• Experience with threat modeling, secure code review, vulnerability validation & retesting.
• Experience coordinating third-party pen tests & reviewing findings.
• Practical knowledge of OWASP guidance and SDLC security controls.
• Ability to read code and automate tasks.

Responsibilities

• Conduct threat modeling, secure design and code reviews for web apps, APIs, cloud services.
• Perform manual and tool-assisted penetration testing; document findings and verify fixes.
• Coordinate external pentest scoping, execution, and remediation retesting.
• Validate customer-reported vulnerabilities and advise on prioritization.
• Improve SAST, SCA, secrets detection, container scanning and CI/CD security workflows.

Skills

AppSec experience

Penetration testing

Threat modeling

Code review

Cloud/Linux/Kubernetes

Education

Bachelor's degree or equivalent

Tools

OWASP guidance

Security testing tools

CI/CD security

Job description

Nasuni is seeking a Senior Security Engineer focused on application security and pentesting to safeguard enterprise data infrastructure and SaaS products. You will identify vulnerabilities, conduct tests, guide secure design, and work with Engineering to remediate and retest findings across Nasuni products, including cloud services and AI-enabled capabilities.

You will independently drive complex assessments, coordinate testing initiatives, and influence risk-based priorities within Nasuni's