Senior AppSec Engineer - Remote Pen Testing

Nasuni Corporation; United States; Remote; USD 140,000 - 190,000; Full time

Benefits offered by this job

Flexible remote work policy

Professional development resources

Job summary

Nasuni is seeking a Senior Security Engineer focused on application security and penetration testing. You will identify and validate vulnerabilities, conduct tests, guide secure design, and collaborate with Engineering to remediate findings across Nasuni products, Resilio, DryvIQ, and cloud services.

The role requires hands-on assessment, threat modeling, and cross-functional influence. You will also improve SAST/SCA, secrets detection, container scanning, and CI/CD security workflows, while

Qualifications

• 5+ years of security engineering experience with hands-on AppSec or pentesting.
• Manual testing of web apps and APIs including auth flows.
• Threat modeling, secure code review, vulnerability validation & retesting.
• Coordinate third-party pentests and review findings.
• Familiarity with OWASP guidance and SDLC security controls.

Responsibilities

• Conduct threat modeling, secure design and code reviews for web apps, APIs, cloud services.
• Perform manual and tool-assisted penetration testing; document findings and verify fixes.
• Coordinate external pentest scoping, execution, and remediation retesting.
• Validate customer-reported vulnerabilities and advise on prioritization and closure.
• Improve SAST, SCA, secrets detection, container scanning and CI/CD security workflows.

Skills

AppSec experience

Penetration testing

Threat modeling

Secure code review

Vulnerability validation & remediation

Third‑party pen tests coordination

Cloud services

Linux/Containers/Kubernetes

Automation

Education

OSCP/GWAPT/GPEX/CSSLP equivalents

Tools

Security testing tools

OWASP guidance

Job description

Nasuni is seeking a Senior Security Engineer focused on application security and penetration testing. You will identify and validate vulnerabilities, conduct tests, guide secure design, and collaborate with Engineering to remediate findings across Nasuni products, Resilio, DryvIQ, and cloud services.

The role requires hands-on assessment, threat modeling, and cross-functional influence. You will also improve SAST/SCA, secrets detection, container scanning, and CI/CD security workflows, while