Senior Application Security Tester

Global Business Ser. 4u; Seattle (WA); Híbrido; USD 140.000 - 200.000; Jornada completa

Descripción de la vacante

Global Business Ser. 4u in Seattle, WA seeks a Senior Application Security Engineer to lead penetration testing, vulnerability management, and secure SDLC practices across web, mobile, APIs, and cloud environments.

You will assess applications, APIs, networks, and cloud environments to mitigate security risks, ensure compliance, and enhance security operations; mentor teams on secure coding and cybersecurity best practices.

Formación

• 8+ years in Application Security and Penetration Testing.
• Hands-on Burp Suite, Kali Linux, Metasploit, Nmap, Wireshark.
• Strong knowledge of OWASP Top 10 and MITRE ATT&CK.
• Experience with .NET, Java, Python, C/C++ for code analysis.
• Certifications (CEH, CISSP, OSCP) are a plus.

Responsabilidades

• Conduct penetration testing and secure code reviews for web, mobile, and APIs.
• Implement SAST/DAST solutions (Checkmarx, Veracode, Snyk).
• Perform threat modeling and vulnerability assessments (Nmap, Nessus, Qualys).
• Work with SOC teams and SIEM tools (Splunk, QRadar, Azure Sentinel) for incident response.
• Integrate DevSecOps into CI/CD pipelines and ensure cloud security in AWS, Azure, GCP.
• Ensure compliance with PCI-DSS, HIPAA, NIST, ISO 27001.
• Mentor teams on secure coding and cybersecurity best practices.

Conocimientos

Application Security

Penetration Testing

OWASP Top 10

MITRE ATT&CK

Cloud Security

Secure Coding

Herramientas

Burp Suite

Kali Linux

Metasploit

Nmap

Wireshark

Checkmarx

Veracode

Snyk

Splunk

QRadar

Azure Sentinel

Nessus

Qualys

Descripción del empleo

Location: Seattle, WA / Hybrid

Experience: 8+ years in Application Security, Penetration Testing, and Authentication

Role Overview

We seek a Senior Application Security Engineer to lead penetration testing, vulnerability management, and secure SDLC practices. The ideal candidate will assess applications, APIs, networks, and cloud environments to mitigate security risks, ensure compliance, and enhance security operations.

Key Responsibilities

• Conduct penetration testing & secure code reviews for web, mobile, and APIs.
• Implement SAST/DAST solutions (Checkmarx, Veracode, Snyk).
• Perform threat modeling & vulnerability assessments (Nmap, Nessus, Qualys).
• Work with SOC teams & SIEM tools (Splunk, QRadar, Azure Sentinel) for incident response.
• Integrate DevSecOps into CI/CD pipelines and ensure cloud security in AWS, Azure, GCP.
• Ensure compliance with PCI-DSS, HIPAA, NIST, ISO 27001.
• Mentor teams on secure coding & cybersecurity best practices.

Skills & Qualifications

• 8+ years in Application Security & Penetration Testing.
• Hands-on expertise in Burp Suite, Kali Linux, Metasploit, Nmap, Wireshark.
• Strong knowledge of OWASP Top 10, MITRE ATT&CK, firewall security.
• Experience with .NET, Java, Python, C/C++ for code analysis.
• Certifications (CEH, CISSP, OSCP) are a plus.