Senior AppSec Engineer: Pen Test & Secure SDLC Leader

Global Business Ser. 4u; Seattle (WA); Hybrid; USD 140,000 - 200,000; Full time

Job summary

Global Business Ser. 4u in Seattle, WA seeks a Senior Application Security Engineer to lead penetration testing, vulnerability management, and secure SDLC practices across web, mobile, APIs, and cloud environments.

You will assess applications, APIs, networks, and cloud environments to mitigate security risks, ensure compliance, and enhance security operations; mentor teams on secure coding and cybersecurity best practices.

Qualifications

• 8+ years in Application Security and Penetration Testing.
• Hands-on Burp Suite, Kali Linux, Metasploit, Nmap, Wireshark.
• Strong knowledge of OWASP Top 10 and MITRE ATT&CK.
• Experience with .NET, Java, Python, C/C++ for code analysis.
• Certifications (CEH, CISSP, OSCP) are a plus.

Responsibilities

• Conduct penetration testing and secure code reviews for web, mobile, and APIs.
• Implement SAST/DAST solutions (Checkmarx, Veracode, Snyk).
• Perform threat modeling and vulnerability assessments (Nmap, Nessus, Qualys).
• Work with SOC teams and SIEM tools (Splunk, QRadar, Azure Sentinel) for incident response.
• Integrate DevSecOps into CI/CD pipelines and ensure cloud security in AWS, Azure, GCP.
• Ensure compliance with PCI-DSS, HIPAA, NIST, ISO 27001.
• Mentor teams on secure coding and cybersecurity best practices.

Skills

Application Security

Penetration Testing

OWASP Top 10

MITRE ATT&CK

Cloud Security

Secure Coding

Tools

Burp Suite

Kali Linux

Metasploit

Nmap

Wireshark

Checkmarx

Veracode

Snyk

Splunk

QRadar

Azure Sentinel

Nessus

Qualys

Job description

Global Business Ser. 4u in Seattle, WA seeks a Senior Application Security Engineer to lead penetration testing, vulnerability management, and secure SDLC practices across web, mobile, APIs, and cloud environments.

You will assess applications, APIs, networks, and cloud environments to mitigate security risks, ensure compliance, and enhance security operations; mentor teams on secure coding and cybersecurity best practices.