Senior AppSec & AI Penetration Engineer - Remote

The Sherwin-Williams Company; Cleveland (OH); Remote; USD 120,000 - 180,000; Full time

Job summary

The Sherwin-Williams Company seeks a Senior Application Security Engineer to plan and perform manual penetration testing across traditional and AI-enabled applications. You will develop scripts and tools to enhance testing effectiveness and mentor teammates while guiding remediation with stakeholders.

Remote position with US work authorization required. You will collaborate with development teams, security groups, and leadership to advance application security across the enterprise.

Qualifications

• Bachelor's Degree (or foreign equivalent) or at least 12 years in IT/Business
• 5+ years IT and/or cybersecurity
• 5+ years in application security with hands-on penetration testing
• Advanced knowledge of web apps, APIs & vulnerabilities
• Manual application penetration testing methodologies & techniques
• Authentication, authorization, session management & app business logic
• SDLC & secure development practices
• AI Architecture & model training processes
• End-to-end app penetration testing incl. cloud-native
• Knowledge of identifying, exploiting & documenting vulnerabilities
• Scripting, automation or custom tooling development
• Experience using security testing tools
• Communicating findings to technical and non-technical stakeholders
• Ability to work independently and with teams
• Experience mentoring others
• Threat modeling experience
• Legally authorized to work in the United States without sponsorship
• Must be at least 18

Responsibilities

• Plan and perform manual penetration testing of traditional and AI-enabled applications
• Develop scripts, automation, and tools to improve testing capabilities
• Mentor other Application Security team members
• Communicate findings, risk, and remediation recommendations to stakeholders
• Retest applications and validate remediation
• Track and report assessment status and remediation progress
• Create and maintain penetration testing documentation and runbooks
• Support Security Champions in secure development practices
• Participate in team planning and knowledge sharing

Skills

Penetration testing

Automation scripting

Mentoring / guidance

Stakeholder communication

Independent work

Education

Bachelor's Degree or higher in IT/Business

12+ years experience alternative

Tools

Offensive security tools

Job description

The Sherwin-Williams Company seeks a Senior Application Security Engineer to plan and perform manual penetration testing across traditional and AI-enabled applications. You will develop scripts and tools to enhance testing effectiveness and mentor teammates while guiding remediation with stakeholders.

Remote position with US work authorization required. You will collaborate with development teams, security groups, and leadership to advance application security across the enterprise.